THE INFORMATION REVOLUTION 
AND NATIONAL SECURITY 



Edited by 

Thomas E . Copeland 



August 2000 







The views expressed in this report are those of the authors and do 
not necessarily reflect the official policy or position of the Department of 
the Army, the Department of Defense, or the U.S. Government. This 
report is cleared for public release; distribution is unlimited. 

Comments pertaining to this report are invited and should be 
forwarded to: Director, Strategic Studies Institute, U.S. Army War 
College, 122 Forbes Ave., Carlisle, PA 17013-5244. Copies of this report 
may be obtained from the Publications and Production Office by calling 
commercial (717) 245-4133, FAX (717) 245-3820, or via the I nternet at 
rummeln@awc.carlisle.army.mil 



Most 1993, 1994, and all later Strategic Studies Institute (SSI) 
monographs are available on the SSI Flomepage for electronic 
dissemination. SSI’s Flomepage address is: http://carlisle-www.army. 
mi I /u sassi /wel come, ht m 



The Strategic Studies Institute publishes a monthly e-mail 
newsletter to updatethe national security community on the research of 
our analysts, recent and forthcoming publications, and upcoming 
conferences sponsored by the I nstitute. Each newsletter also provides a 
strategic commentary by one of our research analysts. If you are 
interested in receiving this newsletter, please let us know bye-mail at 
outreach@awc.carlisle.army.mil or by calling (717) 245-3133. 



ISBN 1-58487-031-1 




CONTENTS 



Foreword v 

Biographical Sketch of the Editor vii 

Introduction 1 

Session 1 

Opening Address 9 

Session 2 

Information and Decisionmaking 31 

Session 3 

Information and I nstitutional Adaption 47 

Session 4 

Signaling and Perception in the 
I nformation Age 67 

Session 5 

The I nformation Re/olution and 

Threats to Security 81 

Session 6 

Responding to Security Threats 107 

Noon Session 

Video Teleconference 117 

Session 7 

Thell.S. Military and Information Operations. . 129 




TABLES 



1. Taxonomy of Problem Types 42 

2. TheThree Virus Domains 82 

3. The Ideational Tenets and Associated 

Principles 122 



IV 




FOREWORD 



The current era has seen more rapid and extensive 
change than anytime in human history. The profusion of 
information and the explosion of information technology is 
thedriver, reshapingall aspects of social, political, cultural, 
and economic life. The effects of the information revolution 
are particularly profound in the realm of national security 
strategy. They arecr eating new opportunities for those who 
master them. The U.S. military, for instance, is exploring 
ways to seize information superiority during conflicts and 
thus gain decisive advantages over its opponents. But the 
information revolution also creates new security threats 
and vulnerabilities. No nation has made more effective use 
of the information revolution than the United States, but 
none is more dependent on information technology. To 
protect American security, then, military leaders and 
defense policymakers must understand the information 
revolution. 

The essays in this volume are intended to contri bute to 
such an understanding. They grew from a December 1999 
conference co-sponsored by the U.S. Army War College 
Strategi c Studies I nstituteandtheUniversity of Pittsburgh 
Matthew B. Ridgway Center for International Security 
Studies. The conference brought together some of the 
foremost members of the academic strategic studies 
community with representatives of the U.S. Government 
and U.S. military. As could be expected when examining a 
topic as complex as the relationship between the 
information revolution and national security, the 
presentations and discussions were far-ranging, covering 
such issues as the global implications of the information 
revolution, the need for a national information security 
strategy, and the role of information in U.S. military 
operations. While many more questions than answers 
emerged, the conference did suggest some vital tasks that 
mi I itary I eaders and defense pol i cymakers must undertake. 
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T he Strategi c Studi es I nsti tute i s pi eased to offer the essays 
as partofthevital national debate over the changing nature 
of security in the information age. 



DOUGLAS C. LOVELACE, J R. 
Director 

Strategic Studies I nstitute 
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INTRODUCTION 



At the beginning of the 21st century, Americans are 
content with their lot in life. U nemployment is at a 30-year 
low, incomes are rising, and inflation is minimal. The world 
seems to be free of major conflict, and— just in case it is 
needed— the U .S. mi I itary is the most advanced and capable 
in the world. These are the good old days. 

However, the apparent calm hides a number of 
crises— the future of democratic capitalism in transition 
states in Europe, Asia, and Africa; ongoing internal and 
external debates over the proper role of America in the 
world; differi ng approaches to guaranteei ng the stabi I ity of 
world ecosystems; the radical ization of many religious and 
ethno-nationali st causes; and the declining sovereignty and 
legitimacy of the nation-state as it struggles to respond to 
economic, social, and political challenges brought on by the 
information revolution. The Chinese symbols for "crisis” 
mean both danger and opportunity. This might also be true 
of revolutions, including the information revolution. 

The information revolution is a phenomenon that defies 
si mpl e characterizati on . I ts ori gi ns I i e i n the not-so-di stant 
past— the British codebreakers at Bletchley Park during 
World War II created "Colossus," the world's first working 
computer. That crude device is now outperformed by a 
hand-held calculator. Yet the origins of the information 
revolution really go further back to the inventions of the 
radio, thetelephone, and even thetelegraph. I n many ways, 
information has been making the world a smaller place 
si nee the invention of the printing press. 

But the information revolution, as it is commonly 
understood today, is heralded as the greatest global 
transition since the Industrial Revolution. It is 
transforming the world's most advanced nations from 
industrial societies to information-based societies. Citizens, 
firms, and governments in information societies rely 



1 




increasingly on high-speed and high-quality information to 
conduct their daily functions and operations. Pieces of data 
have become the building blocks of many modes of human 
interaction and activity. 

The revolution is perhaps best illustrated by its results. 
The speed and volume of computing power have increased 
exponentially while costs have been dramatically reduced, 
bringing personal computers to half of all American homes. 
The revolution has created the Internet, which from its 
origins as a secure, nuclear-proof communications system 
for the military has become a true global information 
system, home to more than 40 million websites with more 
than 800 million pages of information, accessed by more 
than 165 million users. The information revolution is 
moving beyond computer networks; even small countries 
like Finland have gone wireless— more than 80 telecom 
servi ce provi ders servi cethetwo-thi rds of al I F i nns whoown 
mobile phones. 

Opportunity. 

The information revolution seems to hold a lot of 
promise. The U.S. economy saw tremendous growth in the 
1990s, thanks to information technologies. Indeed, 
expectations of future economic growth fueled by the 
information revolution have driven the New York and 
NASDAQ stock exchanges to record levels. The promise of 
economic growth and development applies elsewhere as 
well; technological advances are allowing the least 
developed countries to leapfrog ahead in time, cost, and 
tech nol ogy, from havi ng no tel ephones to acqu i r i ng wi rel ess 
telecommunications. Improved person-to-person contact 
and understanding— thanks to new communications 
technologies resulting in the creation of a "global 
vi 1 1 age''— seem to offer hope that the use of military force 
may become far less necessary in the future. 

Advances in technology and communications are also 
revolutionizing other areas of human interaction such as 
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politics and medicine. Election candidates now put 
si gnifi cant ti me and money i nto bui I di ng web sites i ntended 
to get their message out to voters, who are able to check the 
candidates' records, read news stories, participate in polls, 
make campaign donations, and register to vote, all while 
on-line. The state of Oregon is the first to consider allowing 
citizens to vote over the Internet. These same computer 
users are also able to access the latest research reports and 
advice on medical issues, network with others suffering 
from similar diseases or conditions, and even set up 
appointments on-line. New information technologies are 
being used for distributed medicine, allowing doctors in 
urban hospitals and research centers to work with medical 
professionals in remote areas to diagnose and treat 
patients. Changes in politics and medicine are matched by 
developments in education, entertainment, travel, and 
trade. 

Danger. 

At the same ti me, there is a dark side to the information 
revolution. The gap between the information "haves" and 
the information "have-nots" is getting larger; perhaps only 
20 percent of the world is being influenced by globalization 
and the information revolution. Whilethellnited States is 
the world's superpower in information technology, driven 
primarily by the corporate sector, our dependence upon 
information systems creates enormous vulnerabilities. 
Even though President Truman warned many years ago 
that the critical infrastructure of the United States was 
vulnerable, it has taken thecountry a long time to begin to 
real ize its weaknesses in the face of new threats. Those new 
threats are becoming more potent; advances in 
telecommunications enable opportunists and individuals 
with malign intentions— terrorists, political extremists, 
and criminal groups— to organize themselves effectively 
and to conduct new kinds of activities counter to U.S. 
interests. 
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TheU .S. Army War College's Strategic Studies I nstitute 
and the Matthew B. Ridgway Center for International 
Security Studies at the University of Pittsburgh in 
December 1999 sponsored a conference on the information 
revolution and its impact on national security. Thegoal was 
to bri ng together the corporate, academic, and government 
communities to share lessons I earned from their respective 
efforts to conceptualize and deal with the new threats and 
opportunities presented by the information revolution. 
Discussions at the conference suggested a number of 
important implications. 

Technological Threats Need to Be Carefully 
Assessed. 

The technological threats most often discussed in 
public— cyber-terrorists, hackers, and asymmetrical 
attacks— are not yet as si gnifi cant as some of the domi nant 
pol i cy debates suggest. We have seen very I ittle evidence of 
cyber-terror attacks. Although the information revolution 
has created vulnerabilities and expanded the scope for 
criminal activity, most hackers are juveniles who thus far 
have done little damage against relatively unimportant 
targets, using fairly simple tactics I ike denial -of-service. As 
a type of asymmetrical threat, terrorism in the past has 
benefited from technological advances I ike the jetliner and 
television. But while terrorists certainly make use of some 
of the latest technologies, they still rely primarily on 
tried-and-true tactics and weapons. Terrorists face serious 
challenges in acquiring the technological tools, expertise, 
and access needed to successfully attack critical 
information systems. Thus the information revolution has 
not yet brought new kinds of terrorist threats, but it has 
increased the power available to traditional terror groups 
and other opportunists. 
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Technological Opportunities Abound. 

At the same time, technological solutions are being 
pursued to exploit opportunities made possible by the 
information revolution. Access to open sources through new 
information technologies (such as the Internet and 
commercial satellites) level sthe playing field in intelligence 
collection between public and private entities. Today's 
i ntel I i gence consu mer has many new choi ces, even as pu bl i c 
institutions I ikethe vaunted National Security Agency find 
themselves falling behind the latest technological 
developments. The Information Dominance Center at the 
U.S. Army Land Information Warfare Center (LI WC) takes 
advantage of new software programs, wireless technology, 
and video teleconferencing to train for and coordinate 
information operations in the complex physical and 
informational environment— such as peacekeeping— in 
which today's Army often operates. Private sector 
companies are produci ng new software programs that bri ng 
together databases with structured augmentation 
processes to create a system of virtual collaboration among 
intelligence analysts that is open and logical. And 
technological advances such as data mining and automated 
learning and discovery are being used by the Computer 
Emergency Response Team (CERT) at Carnegie Mellon 
University to create useful intelligence from information it 
has col I ected on near I y 23,000 computer secu r i ty i nci dents. 

Organizational Adaptation is Problematic. 

The U.S. military and most other traditional 
institutions, including firms and governments, are 
ill-prepared to meet new organizational challenges posed by 
nonhierarchical, amorphous, networked opponents. It was 
argued that at the international level we see a lack of 
agreement among nation-states on how they should 
regulate things like the Internet and e-commerce, the 
growing empowerment of (and outright challenges from) 
nontraditional actors, and the inadequacy of traditional 
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intergovernmental forums for dealing with many global 
issues. Further difficulties arise at lower levels. 

Rigid bureaucratic hierarchies make it extremely 
difficult for national governments to prevent or respond to 
many new kinds of transnational threats. Both strategic 
and temporary alliances among criminal organizations are 
hard to track, as are emerging terrorist organizations that 
are small or include only one individual. Hacker attacks, 
often carried out through a network of proxies or "zombie” 
computers, are not typical investigative subjects for law 
enforcement and intelligence agencies. This is not to 
suggest that thell.S. Government is neglecting to respond 
to these threats or to consider changes to organizational 
structures. It is probably farther ahead than any other 
government in understanding and responding to new 
threats, but it is still ill-prepared and inadequately 
organized to address these problems. 

The U.S. military has adapted unevenly to the infor- 
mation revolution. It has been relatively successful in 
applying technology to the battlefield and in tackling new 
roles and missions, but it has not addressed the 
disadvantages of its hierarchical and centralized system 
when facing flexible, networked opponents in the new 
information environment. This failure must be corrected. 

Opportunities Exist to Make Organizational 
Change. 

The undisputed predominance that the U.S. military 
enjoys over military forces anywhere in the world, and the 
relative lack of serious national security threats facing the 
country at the moment, have created a unique environment 
wherei n the mi I itary shoul d be free to make organi zati onal 
changes. Some traditional roles and missions will still need 
to be fulfilled in the future through traditional structures, 
but the military must adapt itself more fully to a 
decentralized, nonhierarchical system. The kind of 
networked, flexible organization that is called for is not a 
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radical idea— 40 years ago Morris J anowitz suggested in 
The Professional Soldier that technology had changed 
warfaretosuch a degreethat coordination, cooperation, and 
teamwork are more fundamental to operational success 
than are authoritarian leadership and structure. The 
military has pushed decisionmaking further and further 
down the chain of command, and is experimenting with new 
technologies that link soldiers and commanders in real 
time. However, the military's willingness to make needed 
organizational changes— required by amorphous and 
networked opponents of the future— will continue to be 
constrained by institutional inertia, service rivalries, and 
conservative thinking. 

The business community has been somewhat quicker 
than the military to respond to the organizational 
adaptation imperative, particularly in regards to 
competitive intelligence. A handful of best-practice 
companies arecarefully establishing uniqueorganizational 
networks and practices that enable them to coordinate 
strategic and tactical competitive intelligence in ways that 
significantly enhance their successful adaptation to 
changes in the global market. Businesses are finding new 
ways to organize themselves to carry out risk assessment 
and management and to provide critical and timely 
services. There is much for the military to learn from the 
business community about flexible organization, and the 
private sector can learn a great deal from the military about 
things I ike the redundancy of critical systems. 

New Concepts Are Needed. 

Dr. J ohn Arquilla of the Naval Postgraduate School 
proposed that much of the normal discussion of information 
strategy is located only at the technological and 
organizational levels, andthereforethereisa need for more 
new thinking at the level of ideational tenets. Members of 
the academic, think tank, business, and military 
communities who participated in this conference provided 
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some unique and important contributions to the 
conceptualization of the information revolution and its 
impact on national security. Participants offered new and 
more complex characterizations of the nature of the 
information revolution, new definitions and understand- 
ings of theoretical and operational elements of information 
operations and warfare, and components of a national 
information security strategy. They also urged deeper 
consideration of the implications of information for the 
security dilemma, deterrence and coercion, perception and 
misperception, alliances, and conflict resolution. 

Conclusion. 

If indeed current technological threats are not as 
significant as they appear in the public debate, one might 
question whether dramatic organizational changes and 
ground-breaking new concepts are really necessary. 
However, it is clear that technology is changing and 
improving so rapidly that the dangers and opportunities 
created, exacerbated, or illuminated by the information 
revolution will only grow in importance. We hope that the 
following summaries of presentations and papers at the 
conference will bean important contribution to the debate 
over the information revolution and national security. 
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SESSION 1: 

OPENING ADDRESS 

'The Information Revolution: 

Both Powerful and Neutral" 

J ames N. Rosenau 

University Professor of International Relations 
The George Washington University 

Much of my presentation may proveto be controversial. 
So let me start with an observation that I believe is 
incontrovertible, namely, that the information revolution, 
by providing technologies that have continued to greatly 
accelerate the collapse of time and space, has added 
substantially to the complexities that mark our time. 
Perhaps most notably, the revolution has rendered what 
once was remote close-at-hand; it has transformed the 
linear into the nonlinear, the sequential into the 
simultaneous; and in so doing, it has pervaded world affairs 
with what I I ike to cal I "distant proximities.” 

This label for the consequences of the information 
revolution is useful because it reeks of complexity, of 
nuance, and the need to guard against simplistic 
conclusions. For there can be no mistaking distant 
proximities for simple interrelationships, readily 
discernible and easily understood. Distant proximities 
encompass the tensions between core and periphery, 
between national and transnational systems, between 
communitarianism and cosmopolitanism, between cultures 
and subcultures, between states and markets, between 
decentralization and centralization, between universal ism 
and particularism, between pace and space, between the 
global and the local— to note only the more conspicuous 
links between opposites that have been accelerated by the 
information revolution. And each of these tensions is 
marked by numerous variants; they take different forms in 
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different parts of the world, in different countries, in 
different markets, in different communities, in different 
professions, and in different cyberspaces, with the result 
that there is enormous diversity in the way people 
experience the simultaneity of the distant proximities that 
the information revolution has intruded upon their lives. 

Put differently, distance is not measured only in miles 
across land and sea; it can also involve less tangible, more 
abstract conceptions in which distance is assessed across 
organizational hierarchies, event sequences, social strata, 
market relationships, migration patterns, and a host of 
other nonterritorial spaces. Thus to a large extent, distant 
proximities are subjective appraisals, what people feel or 
thi nk i s remote and what they thi nk or feel i s cl ose-at-hand. 
There is no self-evident line that divides the distant from 
the proximate, no established criteria for differentiating 
between the more-remote or cl ose-at-hand environments. 
In other words, nearness and farness connote scale as well 
as pi ace. They are a context, a "habitat of mean i ng ,” 1 a mi nd 
set that may often correspond with spatial distance even as 
there are other scalar contexts which can make the 
cl ose-at-hand feel very remote and the faraway seem 
immediately present. 

The Neutrality of the Revolution. 

In short, clearly we need to be sensitive to nuance if we 
are to begin to grasp the meaning and potentials of the 
information revolution. I have tried tohighlight this need in 
the title of my presentation, in characterizing the 
information revolution as powerful but neutral. Surely, 
some would argue, anything that is powerful cannot also be 
neutral, that the word "revolution” suggests power, that 
power suggests purpose, and that, by their very nature, 
purposes are laden with values. Thus, such a line of 
reasoning would conclude, to speak of the information 
revolution as powerful but neutral is not to trace nuance; it 
is be profoundly erroneous! 
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No, I shall contend, it is nuance and not error if one 
treats the revolution in terms of the technologies that 
facilitate the rapid spread of information and the 
simultaneity of distant proximities rather than in terms of 
the information itself. Information is anything but neutral. 
It can be skewed and designed to distort; it reflects, to 
repeat, subject appraisals. This is not the case, however, 
with information technologies. They areessentially neutral 
becausethey do not in themselves tilt in the direction of any 
particular values— neither toward good or bad, nor left or 
right, nor open or closed systems. They are neutral, in the 
sense that their tilt is provided by people. People and their 
collectivities infuse values into information. For better or 
worse, individual sand organizations introduce information 
into political arenas and thereby render it good or bad. The 
neutral ity of i nformation technol ogi es enables the democrat 
as well as the authoritarian to use information in whatever 
way he or she sees fit. 

Thereis, in other words, some utility in starting with the 
premise that the technologies that generate and circulate 
informationareneutral.ltenablesusto a voi d deter mi n i st i c 
modes of thought in which people are seen as being deprived 
of choice by the dictates of information technologies. Put 
more positively, the neutrality premi se compel s us to focus 
on human agency and how it does or does not make use of 
information technologies. 

This is not to imply, of course, that consequences do not 
follow from the power of information technologies and the 
degree to which information technologies are available. 
Indeed, a prime reason why consequences follow is that the 
technologies have facilitated human choice. Through the 
Internet people can now make choices in a vast global 
market, in the political realm, in the types of entertainment 
they enjoy; and there are endless other ways in which the 
I nternet is disaggregating the power of choice down to the 
individual level. Clearly, then, the availability of 
information technologies facilitates the exercise of human 
agency. Yet, to posit choices as facilitated by information 
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availability is not to refer to the impact of values. 
Information technologies are about the contexts within 
which decisional alternatives are considered. They set the 
range within which ends and means are framed, 
alternatives pondered, and choices made. 

If we view this matter in this way, it is misleading to 
analyze information technologies in causal terms. That is, it 
is misleading if one confines the meaning of causation, as I 
do, to human agency. So viewed, causality accounts for the 
choices that are made, and why information is interpreted 
in one way rather than another. But information 
technologies are not human agents. They are simply 
equipment, inanimate hardware, gadgetry. Yet, as such, 
they are both powerful and neutral. 

By treating information technologies as neutral, we cast 
them as background conditions and not as immediate 
stimuli to action— as second-order dynamics that influence, 
contextualize, facilitate, permit, or inhibit courses of action, 
but not as first-order dynamics that change, transform, 
foster, impose, or shape courses of action. The distinction 
between the two types of dynamics is important; it 
differentiates between theoperation of structures and those 
of agents. Put more forcefully, the distinction prevents the 
analyst from mistaking second-order for first-order 
dynamics, for treating information technologies as an 
unseen hand that somehow gets people, groups, or 
communitiestopursuegoalsandundertakeactions without 
awareness of why they do what they do and, accordingly, 
without taking responsibility for their conduct. 

A good illustration ofthedangers of positing information 
technologies as first-order causal dynamics is evident in the 
ada ptat i on of vert i ca I bu si n ess or ga n i zat i on s i n th e 1980s to 
the horizontal flexibility required by the globalization of 
national economies. When diverse enterprises first seized 
upon the new technologies, they treated them as 
labor-saving devices and as means to control labor rather 
than as mechanisms for organizational adaptation. The 
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result was an aggravation of their vertical bureaucratic 
rigidities. It was only after they made the necessary 
organizational changes in order to keep abreast of their 
operational environments that the information 
t ech n ol og i es "ext r a or d i n a r i I y en h a n ced " t h e su ccess of t h ei r 
enterprises . 2 For all practical purposes, in other words, the 
restructuring of businesses away from hierarchical and 
toward network forms of organization preceded the 
considerable impact of information technologies, even as 
the I atter then faci I itated eye-catchi ng growth on the part of 
the former. 

In the same way, the notion of information as neutral 
does not ignore the convertibility of information into 
knowledge and, thus, into power. More accurately, 
i nfor mati on technol ogi es faci I i tate the exerci se of what has 
been called "soft power," a concept that differentiates 
information from the conventional dimensions of material 
power such as oil production, troops in uniform, military 
hardware, and agricultural production . 3 As clearly 
demonstrated during the Gulf War and the Kosovo conflict, 
military capabilities today highly depend on advanced 
information technologies; the targeting of missiles, the 
distribution of ideas through short-wave broadcasts, and 
the dropping of leaflets over citiesexemplifytheapplication 
of information to modern security strategies. Yet, despite 
the innumerable ways in which soft power can be used, it is 
nonetheless the case that the information technologies on 
which it is based are neutral. To repeat, what counts is how 
officials and governments generate and employ the 
technologies, and how publics interpret the information and 
knowledge that comes their way. 

Needless to say, as conditions with which humans must 
cope, information technologies are crucial dimensions of the 
political scene. As they change, so do the contexts in which 
choices are made. As new technologies are developed, so is 
the range of plausible choices altered. Among other things, 
for example, technological innovations pose the question of 
how the range of choice is expanded by the availability of 
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information for those who are, so to speak, informationally 
rich and how it is narrowed for those who are informa- 
tionally poor— and, indeed, how the discrepancies between 
the rich and the poor configure the context within which the 
two perceive each other and interact. 

These contextual factors have been mostly neglected by 
political scientists who study world affairs, a neglect I seek 
to highlight here by addressing four main ways in which 
information technologies contribute to the context within 
which world affairs unfold. More specifically, I undertaketo 
explore (1) how the technologies have made possible an 
alteration of the skills of individuals; (2) how they may be 
affecting the circumstances whereby the gap between the 
informationally rich and poor is undergoing transforma- 
tion; (3) how they may be changing the conditions under 
which individuals and groups interact; and, (4) how they 
may be contributing to the evolution of new global 
structures. 

The Skill Revolution. 

While the world's present population may not be more 
skillful than earlier generations, there are good reasons to 
presume that the skills of today's person-in-the-street are 
different than was the case for his or her predecessor. The 
latter may have been moreskillful in bui I ding fireplaces or 
cathedrals, but today's citizenries are more skillful in 
linking themselves to world affairs, in tracing distant 
events through complex sequences back into their homes 
and pocketbooks. These changes seem so extensive as to 
warrant labeling them as a "skill revolution," as a 
transformation that has three basic dimensions— an 
analytic dimension, an emotional dimension, and an 
imaginative dimension— all of which have been greatly 
facilitated by the recent advent of technologies that bring 
ideas, information, and pictures into the lives of people in 
ways that had not previously been possible. Global 
television, the Internet, the fax machine, fiber optic cable, 
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e-mail, the computer, and, most recently, a mobile phone 
that links one's e-mail and computer, have all enabled 
people to alter their skills in such a way as to adapt more 
effectivelytothedemandsof an ever more complex world. 4 

Some have argued that people tend to adapt to the 
information age by turning away from the realm of ideas 
and politics. However, quite the opposite proved to be the 
case in a systematic survey of Americans who make 
exten si ve u se of at I east f ou r of f i ve i nf or mat i on tech n ol ogi es 
and were classified as Connected or Super connected to the 
digital world: 5 

Despite the national lament that technology undermines 
I iteracy, Connected Americans are. . . more I i kely to spend ti me 
reading books than any other segment of the population 
broken down in this survey. Seventy percent of the Connected 
say they spend 1 to 10 hours reading a book during a typical 
week; another 16 percent read for 11 to 20 hours a week. Far 
from being distracted by the technology, Digital Citizens 
appear startlingly close to thej effersonian ideal— they are 
informed, outspoken, participatory, passionate about 
freedom, proud of their culture, and committed to the free 
nation in which it has evolved. 6 

Furthermore, the dynamics of change fueling the skill 
revol uti on are I i kely toaccel erate as i ncreasi ngl y e-mai I and 
computer-literate generations of children and adolescents 
move into adulthood. For example, it is portentous, or at 
least noteworthy, that a 1999 survey of young people 
between the ages of 13 and 17 in the United States revealed 
that 63 percent used a computer at home (compared to 45 
percent in 1994) and 42 percent had e-mail addresses. 7 
These findings suggest that the ranks of Super connected 
and the Connected are likely to swell with the passage of 
ti me and the advent of new generati ons, thus addi ng to the 
ways in which the skill revolution is a powerful source of 
change in world affairs. 

While the acceleration rate of the skill revolution 
elsewhere in the world may not match or exceed the rate in 
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thel) nited States, it is i mportanttostressthatthechanging 
skills of people everywhere matter. As indicated in the 
ensuing analysis, the newly acquired analytic, emotional, 
and imaginative skills have enabled individualstojoin and 
participate in organizations appropriate to their interests 
and thereby to know when, where, and how to engage in 
collective action. In addition, as will be seen, the enhanced 
publ i c affai rs ori ented ski 1 1 s of peopl e have contri buted to a 
major transformation of the global structures that govern 
world affairs. 

Bridging the Information Gap. 

There is little question that the benefits of the 
information revolution have been enjoyed by only a small 
proportion of the world's population, and that the gap 
between those who are rich and poor with respect to their 
access to information is huge. For example, while North 
America and Western Europe had, respectively, 43.5 and 
28.3 percent of the world information technology market in 
1995, the comparable figures for Latin America on the one 
hand and Eastern Europe, the Middle East, and Africa on 
the other were 2.0 and 2.6 percent. Put even more starkly, 
whi I ethe number of personal computers per 1,000 people in 
low-income and lower-middle-income economies in 1995 
was 1.6 and 10.0, thecomparablefiguresfor those in newly 
industrialized economies (NIEs) and high-income 
economies were 114.8 and 199.3. Or consider I nternet users 
per 1,000 people in 1996: for the former two types of 
economies the number was 0.01 and 0.7, respectively, 
whereas the number in the latter two types of economies 
was 12.9 and 111.0. 8 

Notwithstanding the importance of these huge gaps 
between the informationally rich and poor— gaps which 
provide the rich with advantages and opportunities not 
available to the poor— such data tell only part of the story. 
Most notably, they do not depict the trend line that readily 
allows for the assertion that not only are the informa- 
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ti onal ly ri ch getti ng ri cher, but the i nfor mati onal ly poor are 
also getting richer. The gap remains huge, but it is 
nonetheless the case that in a variety of ways the 
information revolution is also unfolding in the developing 
world and that, along several dimensions, the gap is 
narrowing and likely to continue to narrow in the years 
ahead. This shrinking of the gap stems from several 
sources. One is the enormous decline in the costs of 
information technologies, a decline that is brilliantly 
suggested by thefact that, for diverse reasons, "computing 
power per dol I ar i nvested has ri sen by a factor of 10,000 over 
the past 20 years” and that the "cost of voice transmission 
circuits has fallen by a factor of 10,000 over those same 20 
years.” 9 Another source of the narrowing gap involves the 
capacity of developing countries to "leapfrog the industrial 
countries by going straight from underdeveloped networks 
toful ly digitized networks, bypassingthetraditional analog 
technology that still forms the backbone of the system in 
most industrial countries." 10 Likewise, while most of the 
developing world has yet to be wired, its peoples can get a 
cellular phoneand do not haveto wait for the installation of 
fixed lines. It is noteworthy, for instance, that the 

number of cellular phones per fixed line is already as high in 
some low- and middle-income economies as in some 
industrialized countries; some developing countries with low 
density in both traditional telephone service and cellular 
phones have recently invested in cellular technology at a very 
fast rate . . . .The Philippines, a country with low telephone 
density (only 2.5 main lines per 100 people), has a higher ratio 
of mobile phone subscribers to main lines than J apan, the 
United Kingdom, the United States, or several other 
industrial countries with densities of more than 50 main lines 
per 100 people. 11 

Put differently, not long ago it was conventional toregret 
that development in Africa lagged because the continent 
was not wired. But now this lag is less portentous because 
communications in and to Africa are on the verge of 
becoming wireless. I n other words, 
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The wireless revolution isendingthedictatorshipof place in . . . 
profound way[s] .... In the past, one of the biggest 
di sadvantages of bei ng born i n the poor worl d was that you were 
isolated from modern communications— and hence locked into 
the local economy. But mobile phones are great levelers, 
spreading the latest tools of communication to areas were 
traditional phone companies could not reach. The phone ladies 
of Bangladesh aregoing around with mobile phones that would 
turn heads in Hollywood restaurants, and enabling their 
customers to plug themselves intothe global economy . 12 

Of course, the rise in the trend line in developing 
countries is especially noticeable among their elite and 
educated populations. Once the Internet was introduced 
into Kuwait in 1992, for example, scientists, scholars, and 
students came on-line in increasing numbers. Within 6 
yearstheir ranks had i ncr eased to some 45,000, and many of 
these are younger people who hang out in any of seven 
Internet cafes in Kuwait City, where they escape the heat 
and at the same ti me use the I nternet for chatti ng, dati ng, 
or otherwise reinforcing their local culture. 13 The 
information revolution has also reached the small villages 
of the Middle East: in the case of Al Karaka, Egypt, there 
was electricity but only one telephone in the 1970s; 
however, less than two decades later all its houses had 
electricity, and "there are also 20 telephonesand morethan 
55 television sets. . . ." 14 

Nor are authoritarian countries able to hold back the 
information revolution. China, for example, has some 1.2 
million Internet accounts, many of which are shared by 
several users, and it would appear that the number of 
accounts and users grows continually. 15 Likewise, I ran has 
an estimated 30,000 people with I nternet accounts even as 
it also seeks to control theflow of information to and among 
them. 16 Whether such controls can ever be adequately 
established is, however, problematic. 

In sum, while there are billions of persons who do not 
have access tothe I nternet, thei r numbers are dwi ndl i ng as 
more and more people and organizations everywhere are 
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coming on-line. Put differently, and to recast a common- 
place metaphor, tofocus on those who lack access may be to 
see the glass as 19/20 empty, but the trend line is in the 
direction of it being increasingly more than 1/20 full. 

I n ter active Contexts. 

Perhaps the single most important consequence of the 
newer information technologies— and probably the 
consequence that justifies a continuing reference to the 
"information revolution”— concerns their impact on the 
modes through which individuals and organizations 
interact. Until the advent of the most recent technologies, 
and especially the Internet, the vast majority of these 
interactions were hierarchical in nature, both within 
organizations and across organizations engaged in similar 
pursuits. The former hierarchies tended to be formally 
established, with ranks and positions that allowed for 
top-down flows of authority and policy directives, whereas 
the across-organization hierarchies were also marked by 
top-down arrangements but were more in the nature of, so 
to speak, pecking orders— informal but widely shared 
rankings of prestige, influence, and power. Both theformal 
and informal hierarchies, however, have been 
supplemented by the horizontal networks that the newer 
technologies permit. As a consequence of the capacities for 
networking facilitated by the newer information 
technologies, the present era is marked by a veritable 
explosion of organizations and associations, an explosion so 
vast that fully tracing and documenting it is virtually 
i mpossi ble. At every level of community i n every part of the 
world, new organizations are continuously being formed 
that are preponderantly sustained by network rather than 
hierarchical structures. 17 

Note that hierarchies are being supplemented and not 
replaced by networks. To stress that the network has 
become a central formof human organization isnottoimply 
that hierarchies are headed for extinction. There will 
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always bea need for hierarchy, for authoritytobearrayed in 
such a way that decisional conflicts can be resolved and 
policies adopted by higher authorities when consensual 
agreements prove unachievable in anytype of organization. 
The present period of dynamic transformations is likely to 
be one in which many hierarchies are flattened, perhaps 
even disrupted, but such a pattern is not the equivalent of 
antici pati ng the demise of hierarchical structures. 18 

This is not to imply that horizontal networks are new 
forms of organization. The networks that flow from 
horizontal communication have long been features of 
human endeavor. Such interactions have always been 
possible, say, by steamship and letters during most of the 
19th century and by wi rel ess and tel ephone during the fi rst 
half ofthe20th century. But these earlier technologies were 
available only to elites. Others could not afford them. What 
is new today, however, is that horizontal exchanges are not 
only rendered virtually simultaneous by the information 
revolution, but their cost has been reduced to nearly 
nothing. As a result, horizontal networking is no longer 
confined to the wealthy and the powerful; instead, it is now 
available to any ordinary folk who have access to the 
Internet. Stated in terms of the new technologies, 

the growth of a vast new information infrastructure including 
not only the Internet, but also cable, cellular, and satellite 
systems, etc., [has shifted] the balance . . . from one-to-many 
broadcast media (e.g., traditional radio and television) to 
many-to-many interactive media. A huge increase in global 
inter connectivity is resulting from the ease of entry and access 
in many nations, and the growing interest of so many actors in 
using the new infrastructure for all manner of interactions . 19 

The networking potential that flows from the easy 
availability of information technologies is perhaps 
especially conspicuous in the United States. For not only 
has Internet usage in the United States more than doubled 
in the last 4 years, 20 but 9 percent of those in the 
aforementioned survey of the usage of diverse information 
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technologies were classified as either "Connected” or 
"Super connected" to the course of events . 21 That this 
high-usage stratum of the public is capable of extensive 
networking can be readily deduced from a central finding of 
the survey: 

The Internet, it turns out, is not a breeding ground for 
disconnection, fragmentation, paranoia, and apathy. Digital 
Citizens [the Connected and the Superconnected] are not 
alienated, either from other people or from civic institutions. 

Nor are they ignorant of our system’s inner workings, or 
indifferent to the social and political issues our society must 
confront. I nstead, the online world encompasses many of the 
most informed and participatory citizens we have ever had or 
are likely to have . 22 

Clearly, then, the significance of virtually free access to 
the I nternet by ever greater numbers of people can hardly 
be under esti mated. A I ready it has faci I itated theformati on 
and sustenance of networks among like-minded people who 
in earlier, pre-Internet times could never have converged. 
The result has been the aforementioned organizational 
explosion, a vast proliferation of associations— from 
environmental tohuman rights activists, from small groups 
of protesters to large social movements, from specialized 
interest associations to elite advocacy networks, from 
business alliances to interagency governmental 
committees, and so on across all the realms of human 
activity wherei n mutual ity of i nterests exists. This web-l i ke 
explosion of organizations has occurred in territorial space 
as well as cyberspace, but the opening up of the latter has 
served as a maj or sti mu I us to the associ ati onal prol iferati on 
in the former. Indeed, the trend toward network forms of 
organization, 

is so strong that, projected into the future, it augurs major 
transformations in how societies are organized— if not 
societies as a whole, then at least parts of their governments, 
economies, and especially their civil societies . 23 
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A stunning measure of the shift from hierarchical to 
network organizations facilitated by the new information 
technologies can be seen in innovations adopted by the U.S. 
Marine Corps. In a recent exercise called URBAN 
WARRIOR, a unit of Marines comprised of all ranks from 
gen er a I s to pr i vat es I a u n ch ed a n "i n vasi on "of t h e C a I i f or n i a 
coast, with the lower ranked personnel that "hit the 
beaches” al I carryi ng hand-held computers that I inked them 
to all the others in the unit and collectively provided all 
concerned with a pi ctureof how the "battle” was unfolding. 
In effect, they operated as a network in which rank and 
hi erarchy were i rrel evant, an arrangement that the Marine 
Corps plans to apply on a larger scale in the future. 24 

While the large extent to which the I nternet underlies 
the trend toward networking in government, business, and 
mi I i t a ry or ga n i zat i on s ca n n ot be overstated , i t s r el eva n ce to 
the world of voluntary associations and nongovernmental 
organizations (NGOs) is even more profound. In effect, it 
has facilitated a step-level change in what is called "civil 
society," that domain of the private sector where people 
have not had the resources to widen their contacts and 
solidify their collaborative efforts that have long been 
avail able to governments, corporations, and armies. Now it 
is possible to inform, coordinate, and mobilize like-minded 
individuals in all parts of the world who have common goals 
towhich they arewillingtodevotetimeand energy. Equally 
important, NGOs and the advocacy networks they sustain 
are proliferating. In 1979, for example, only one 
independent environmental organization was active in 
Indonesia, whereas by 1999 the number of such 
organizations had risen to more than 2,000 linked to an 
environmental network based in J akarta. Likewise, 
registered nonprofit organizations in the Philippines grew 
from 18,000 to 58,000 between 1989 and 1996; in Slovakia 
the figure went from a handful in the 1980s to more than 
10,000 today; and in the United States, 70 percent of the 
nonprofit organizations— not counting religious groups and 
private foundations— filing tax returns with the Internal 
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Revenue Service are less than 30 years old, andathirdare 
less than 15 years old. 25 

Clearly, then, the proliferation of advocacy networks is 
altering the landscape of world affairs and having 
substantial consequences for the course of events. Whether 
or not a global civil society will ever evolve, itiscertainlythe 
case that transnational networks of private citizens have 
become pervasiveand central actors on the global stage. 26 It 
is not an exaggeration, in other words, to note that the 
global stage is becomi ng ever more dense as a huge variety 
of NGOs acquire the new technologies and thereby extend 
their reach and coherence. Indeed, as I will el a borate below, 
is a density that has altered the structures through which 
world politics are conducted. In sum, 

our exploration of emergent social structures across domains 
of human activity and experience leads to an overarching 
conclusion: as a historical trend, dominant functions and 
processes in the information age are increasingly organized 
around networks. Networks constitute the new social 
morphology of our societies, and the diffusion of networking 
logic substantially modifies the operation and outcomes in 
processes of production experience, power, and culture. While 
the networking form of social organization has existed in other 
times and spaces, the new information technology paradigm 
provides the material basis for its pervasive expansion 
throughout the entire social structure . 27 

New Global Structures. 

With people in both developed and developing countries 
becomi ng more ski I Ifu I i n rel ati ng to publ i c affai rs, and with 
organizations proliferating at an eye-catching and 
accelerating rate, it is hardly surprising that information 
technologies have contributed to transformations in 
historical global structures. Stated most succinctly, as the 
global arena has become ever more dense with actors and 
networks, the traditional world of states has been 
supplemented by a second world comprised of a wide variety 
of nongovernmental , transnati onal , and subnational actors, 
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from the multinational corporation to the ethnic minority, 
from the professional society to the knowledge community, 
from the advocacy network to the humanitarian organi- 
zation, from the drug cartel to the terrorist group, from the 
local government to the regional association, and so on, 
across a vast range of collective endeavors. Despite its 
diversity and cross-purposes, this "multi -centric” world is 
seen as having a modicum of coherence such that it coexists 
with the state-centric world. In effect, global structures 
have undergone a bifurcation in which the two worlds are 
conceived as sometimes cooperating and often conflicting 
but at all times interacting. 

Need I ess to say, this interaction between the worlds has 
been greatly facilitated by the information technologies, 
thus collapsing time, deterritorializing space, and 
rendering traditional boundaries increasingly obsolete. 

I ndeed, the more the technologies advance, the more they 
facilitate the opening up of both governments and 
nongovernmental organizations to the influence of their 
members, to bottom-up and horizontal processes that have 
greatly complicated the tasks of governance on a global 
scale. 8 For national governments these changes— and the 
vast proliferation of interconnections they have fostered— 
have confounded the traditional practices of diplomacy and 
the long-standing premises of national security, thereby 
necessitating a rethinking of how to pursue goals in relation 
to the demands of both other states and the innumerable 
collectivities in the multi -centric world . 29 For the latter the 
increased connectivity has provided opportunities as well as 
challenges as they seek to network and build coalitions with 
like-minded actors and contest the coalitions that stand in 
the way of their goals. 

In short, the bifurcation of global structures has led to a 
vast decentralization of authority in which global 
governance becomes less state-centric and more the sum of 
crazy-quilt patterns among unalike, dispersed, 
overlapping, and contradictory collectivities seeking to 
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maintain their coherence and advance their goals. More 
than that, the interconnection of these patterns 

is likely to deepen and become the defining characteristic of 
the 21st century. The information revolution is what makes 
this possible; it provides the capability and opportunity to 
circuitize the globe in ways and to degrees that have never 
been seen before. This is likely to be a messy, complicated 
process, rife with ambivalent, contradictory, and paradoxical 
effects. 30 

The information revolution may be neutral in the sense 
that it permits the application of diverse and competing 
values, but clearly it underlies extensive consequences in 
every realm of global affairs. And since there is no end in 
sight to the development of new information technologies, 
clearly the full ramifications of their impact are yet to be 
experienced as people and their collectivities seek to keep 
abreast of the complexities of the dynamic transformations 
that are altering the human condition. 

DISCUSSION 

Discussion focused on three subjects: the idea that 
technology is neutral; the relationship between the two 
worlds of global politics (state-centric vs. multi-centric); and 
the implications of information quality for interpretation 
and learning. 

Dr. Rosenau:Thereareconsequences of technology, they 
arejust second order— and not necessari ly al I good. As to its 
neutrality, we should differentiate between human 
consequences as against the gadgetry and technology that 
lead to those consequences . 

In Seattle at the meeting of the World Trade 
Organization, we saw the two worlds of world politics 
converging in the streets. My notion of the 21st century is 
that in the political world we will continue to see the 
disaggregation of authority, which will move upwards to 
supranational organizations like the European Union, 
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sidewards to social movements, and downward to 
subnational groups. A lot of theshifts in authority will be to 
the detriment of the nation-state. I would never say that 
states are on thei r way out or off the stage, but they are not 
as competent as they used to be. They cannot control the 
flow of information, money, pollution, crime, drugs, or 
people across their boundaries. It seems that the world is 
going to get messier. 

Regardi ng thequal ity of i nformation, with my students I 
say that their task is to develop knowledge, to be 
self-conscious and aware of the context frames they use 
when looking at the world. The information revolution 
makes people more possessive of working knowledge. Let 
me give an example. Scientists took a sample of chess 
players and nonchess players, and asked each group to 
recreate a chess board after a chart was flashed for 5 
seconds. They divided thechess players intotwo groups, one 
whi ch saw pi eces i n an ordered pattern, and the other whi ch 
saw a random alignment of pieces. Those facing the 
game-1 ike scenario had no problem reconstructing it; those 
faced with a random board had no idea what to do. The 
notion of the skill revolution (as part of the information 
revolution) is that while all of the information sometimes 
gets misinterpreted or ignored, the net consequence of the 
flow is greater imagination and capacity for judgment, so 
that people enlarge their working knowledge. Some would 
say that the revolution is not happening, that government 
continues unabated; but the information revolution, despite 
all its faults and the problem of being inundated with 
information, has led to dramatic changes and increases in 
peoples' skills. 
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SESSION 2: 

INFORMATION AND DECISIONMAKING 



The second session assessed the impact of the 
information revolution on intelligence and decisionmaking, 
looking at issues related to "data overload” or "information 
smog," as well as the abundance of open sources that 
challenge traditional government monopolies of 
intelligence. In addition, it considered how information 
technology might be used to enhance intelligence analysis. 

"Exploiting Open Source Information- 
Abundance, Value, and Intelligence Community 

Credibility" 

Dr. Davis Bobrow 
University of Pittsburgh 

We begin with two intelligence community equations. 
First, the quality of an intelligence product is equal to 
collection x exploitation/processing x analysis. Second, 
intelligent policy is equal to the quality of the intelligence 
product x awareness of U.S. behavior and options x policy 
u ser/con su mer d i sci pi i n e. W h at t h i s mea n s i s t h at on e cou I d 
havea great intelligence product, zero uncertainty, perfect 
ti mi ng, and sti 1 1 have a di saster. I f one understands the i dea 
of "value at the margins," it is not obviously or necessarily 
the case that upgrading the first term of either equation 
(collection and quality product, respectively) offers the most 
leverage from an i ncrement of i mprovement. We leave it up 
to the reader to decide which of the six yields the fastest 
improvement for the contemporary U nited States. 

Our premise is that the information revolution makes 
less credible the notion that official intelligence 
communities havea monopoly (if they ever did) on any of the 
elements of a quality intelligence product. Therefore, they 
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should understand that they are in an extraordinarily 
competitive environment, with a complex group of 
American and foreign processors, collectors, analysts, and 
consumers. Whether or not this is accepted in the 
intelligence community, anyone interested in being 
informed will understand that they have a menu of choice 
far greater than they have ever had before. 

The Problem Context. 

Even an oversimplified version oftheglobal information 
environment will reveal mi 1 1 ions of people producing "stuff," 
some of which may be considered "information. "There are 
now many more producers and sources, a real proliferation 
of suppliers. The problem is sifting through all theavailable 
information to find the important nuggets. Take 
government providers and others, add commercial 
overhead imagery and some 8,000 online commercial 
databases, etc., and one finds simply a "supply glut" of 
information. 

Inthepost-Cold War period, there is a demand boom for 
intelligence products. There are more issues, more 
government consumers, more cross-sectoral customers 
(public, private, and nonprofit), more coalitions, and more 
outside actors, all stimulated by the notion that in the new 
information environment, information carries a premium 
for effective behavior. 

At the same time, the intelligence community faces a 
resource problem, and the ratios are getting worse. There 
are more requirements and more potential sources; one 
might call this "more hay to the needle." But there is less 
manpower available— there are fewer searchers for the 
needles. The number of CIA analysts basically has been flat 
since the mid-1970s; in fact, there have been radical 
workforce reductions across U.S. intelligence agencies 
associated with the Department of Defense over the last 
decadeand a half. What this means isfewer specialists and 
more generalists who issue-hop, depending on policy 
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priorities. I n the context of information overload, there is an 
i ncreasi ng tendency tofol I ow the maxi m of Sandy Berger: "I 
worry about today's problems today and tomorrow's 
problems tomorrow." This means that intelligence, no 
matter how good, will be of little help because it will come 
too late. 

Open Source Generalities. 

In this context, we turn to considering open sources. 
Experts for many years have suggested that exotic sources 
are less important than open sources. George Kennan 
stated that "the need by our government for secret 
intelligence about affairs elsewhere in the world has been 
vastly overrated." He also noted: 

I would say that something upward of 95 percent of what we 
need to know could be very well obtained by the careful and 
competent study of perfectly legitimate sources of information 
open and available to us in the rich library and archival 
holdings of this country. Much of the remainder, if it could not 
be found here (and there is very little that could not) could 
easi I y be n on-secret i vel y el i ci ted from si mi I ar sources a broad . 

Allen Dulles, another man who knew about secrecy, said: 

Because of its glamour and mystery, overemphasis is 
generally placed on what is called secret intelligence, namely 
the intelligence that is obtained by secret means and secret 
agents .... I n time of peace the bulk of intelligence can be 
obtained through overt channels, through our diplomatic and 
consular missions, and our military, naval, and air attaches in 
the normal and proper course of their work. It can also be 
obtained through the world press, the radio, and through the 
many thousands of Americans, business and professional 
men, and American residents of foreign countries, who are 
naturally and normally brought in touch with what is going on 
in those countries. 

Both of these experts stressed open source information well 
before the information revolution. The obvious questions 
are: What has happened to prove they are wrong, or what 
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has happen edtomakeusrealizetheyareright?Theobvious 
answers are "not much” and "a great deal." 

The Central Intelligence Agency (CIA) Directorate of 
I ntel I i gence revi ew I i sted thecontri buti on of open sources at 
35 percent— much higher than either human intelligence or 
signals intelligence. The community's open source program 
office found that over 80 percent of the information gaps 
production managers had identified could have been filled 
by open sources. So the range is probably somewhere 
between 35 and 80 percent. Open sources also have the 
advantage of the "third party rule," which is that one can 
disseminate information to people who do not have a lot of 
clearances. If one believes in the multi -actor world as 
outlined by J ames Rosenau, the need for dissemination is 
crucial for information to realize its full potential value. 

TheAspin-Brown Commission, which began early in the 
Clinton Administration, talked about creating an open 
source gateway to the intelligence community, in effect 
screening intelligence requirements to sort out information 
that had to be produced from secret vs. outside sources. I n 
1997, despite all these reasons, about 1 percent of U.S. 
intelligence community funding went to open sources. The 
ambitious Aspin-Brown recommendations have never been 
implemented, and perhaps the community is even sliding 
backwards. Recently, another wave of reports following 
alleged intelligence failures triggered the post-mortems 
calling for more use of outside experts and outside 
information to control for internal bias. 

Why the disparity between the alleged value of open 
sources and funding? There are several charges often made 
against open sources. 

• First, open sources and unclassified analysts, if used 
too much, let the enemy know about sources and methods. 
But we should fall back on Edward Teller's rule that if 
everything is open, it is hard for others to find the needle in 
our haystack. 
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• Second, there is a lack of analytic discipline in open 
sources. However, most American collection agencies and 
foreign counterparts go around pitching their latest "hot 
take''which has never been subjectedtocollectivediscipline 
or competitive analysis. 

• Third, it is easier to provide misinformation inserted 
intoopen sources. Butthisis nottrueif oneisawareof how 
easy it is, and where no one has a vested interest in 
defendi ng the purity of thesource or collection technology. 

• Fourth, nonintelligence community analysts aremore 
gullible and take a more benign view of human nature. 
However, classic historians do not seem to have that flaw, 
and most students of American politics are somewhat 
cynical. 

• Fifth, it is argued that we need "hardfacts''for military 
operations, so-called "expeditionary facts.” But in the past, 
American military endeavors have often been hindered by 
the lack of open source information which could have 
provided missing facts. 

An Ambiguous Case: The Chinese Embassy in 
Belgrade. 

The U.S. cruise missile attack in March 1999 that 
damaged the Chinese embassy in Belgrade has been 
criticized as an intelligence failure which could have been 
prevented through more reliance on open sources. We 
decided to check this out, but found that obvious open 
sources— both on the Internet and even traditional tourist 
guides like F odor's— provide no address for the Chinese 
embassy. But a little moredigging reveals two official Serb 
government web sites which have listings of where the 
embassy is. So if there is an address, oneonly needs a map to 
get expedi ti onary facts. We went to H i 1 1 man L i brary here at 
the University of Pittsburgh to find a map which indeed 
shows exactly where the current Chinese embassy is in 
Belgrade. 
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Does that make the case for open sources? 
Unfortunately, it is not that easy. An official U.S. 
Government map (made public by a disgruntled public 
employee) shows the embassy clearly. So maybe we did 
know exactly where the embassy was. Later articles 
indicated that NATO officers involved in operations knew 
where it was, and that it was taken off the "no-hit" list 
because the Chi nese were assisti ng the Serbs with mi I itary 
intelligence. 

Looking at almost any individual casetoargueaboutthe 
value of open sources and uncleared analysts, it is easy to 
find ambiguity. Yet there is often valuable open source 
information even on expeditionary facts. In the case of the 
C h i nese embassy i n B el grade, however, there i s no reason to 
conclude that the policy choice— bombing— would have 
been different even if open sources had been consulted. 

Given the current information environment, we should 
remember that the open source debate has been goi ng on for 
50 years. The I ntel I igence community faces challenges and 
opportu niti es that are morethan mere budgetary probl ems, 
yet there is a chronic resistance to open sources and open 
analysts. It is past time to move beyond the unrewarding 
anecdotal debate between optimists and pessimists, and 
run a systematic set of tests to see who does better at 
produci ng one or another type of i ntel I i gence product. 

'^Crisis Avoidance and Mitigation: 

The Genoa Approach" 

Scott Fisher 
PSR/Meridian 

One of the things we face in the intelligence world after 
the information revolution is delivering products in time. In 
the conflict between depth of analysis and length of time, 
what usual ly ends up sufferi ng is depth of analysis. We need 
productsin less time than before, and we only handle what 
is happening today. 
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The information revolution has made situation 
management much more difficult. The goal should be to 
develop a mitigating strategy before the crisis requires 
intervention, so that the use of military force is an option of 
choice, not a necessity. But there are often problems in 
getting decisionmakers' attention, and there is usually a 
disconnect between them and analysts. The Genoa 
approach— a mixture of information technology and 
collaborative software— tries to bring the parties back 
together to increase both depth and speed of analysis. 

There are three key concepts in the Genoa approach: 
transparency, persistence of information, and a cohesive 
envi ronment. With transparency, whatever the i ntel I i gence 
analysts produce can be seen by decisionmakers, who can 
take the product and recreate or get inside the process that 
created it. Persistence is also important. We need a 
corporate memory not just to save information, but to be 
able to manipulate it later, that is, to be able to query 
against databases of past experience. The cohesive 
environment of Genoa is designed to make sure that all of 
the tools work together to provide transparency and 
persistence. 

Genoa utilizes a powerful, web-based environment that 
facilitates out-of-the-box thinking. The idea istoavoid using 
the standard train of thought. To use a historical example, 
although the United States considered Pearl Harbor as a 
possi bl e site of confl i ct, we deter mi ned that we woul d fi ght 
J apan in the Philippines first, and we were obviously wrong. 
The goal is to expand the possibilities of imaginative 
thinking, to look at more and different arguments, and to 
arrive at more clear and concise policy options, enabled by 
the technology being developed for Genoa. 

Genoa takes a three-pronged approach to time. We 
uti I i zecorporate memory i n thefor m of databases todevel op 
current crisis paths, which are in turn leveraged todevel op 
scenario-based planning about the future. The notion of 
corporate memory may be controversial because it allows 
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one to go back later and analyze who made the most 
successful analysis. However, it is crucial to preserve 
information to use in the future. The idea of crisis paths is 
that instead of considering only the most likely scenario, 
Genoa allows analysts and policymakers to consider other 
plausible but high-impact and high-uncertainty options. 

A key step in this process is the involvement of 
policymakers. For example, a policymaker may have found 
something that focuses his attention, like a newspaper 
articleabout Aum Shinrikyo. With this system, theanalyst 
develops various scenarios, and the policymaker can 
consider a number of options. But the policymaker must be 
involved for the process to be valid. 

The logic behind crisis paths is structured 
argumentation. Genoa provides a set of templates to use, 
which can handle either a top-down hypothesis (take a 
model and collect intelligence to test it) or a bottom-up, 
data-driven model (the information is present, but its 
applicability must be determined). An analyst can build a 
transparent argument for why something is a threat, using 
a structured hierarchy of questions that can be edited tosuit 
thedemands of the particular case. Thesystem thus makes 
a transparent and direct connection between the evidence 
and the rationalefor the argument, enabling analysts and 
pol i cymakers to argue not about concl usi ons but about the 
details, the intelligence data. 

The next step is collaboration between analysts. Genoa 
creates what are called thematic argument groups (TAGs), 
pi aces for vi rtual col I aborati on. L i ttl e ti me i s requ i red to set 
up a TAG, and any member of a TAG can participate in the 
discussion through thesoftwaretools. Thegoal istomakeit 
preferable to collaborate virtually rather than over the 
phone. In this environment, there is a push and pull of 
information. 

In the search for information, the question of signals 
versus noise i s i mportant. H owever, Genoa offers theabi I ity 
to search for more focused information, using thematic 
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navigation and semantic regions to find subdocument level 
stories. Any analyst or decisionmaker can take the new 
information and go back and modify the argument, 
lessening the danger of rigid argumentation. 

The final step is summarization and publication of 
information, which can take place through typical printed 
publication or computer-based visualization and data 
storage. 

In sum, the Genoa approach provides transparency in 
analysis and persistence of information in a cohesive 
environment which aides decisionmakers and analysts in 
handling the speed and volume of information in the new 
global information environment. 

'1 ntel I i gence Analysi s and I nfor mati on 
Overload" 

Lisa Krizan 

Defense I ntel I i gence Agency 

Being a parent has really colored my outlook on life. It 
reduces I ifetothe basics, likeeating, sleeping, working, and 
playing. This way of thin king spills over into work life. After 
beginning with some comments about intelligence sharing 
between national intelligence and business intelligence, I 
will share some thoughts on dealing with information 
overload by getting back to basics in terms of intelligence 
requirements and analysis. 

Intelligence Sharing in a New Light. 

Although "information sharing” traditionally has been a 
govern ment-to-govern ment transacti on , the en vi ron ment i s 
now receptive to government-private sector interaction. 
There has been a widespread trend toward incorporating 
government intelligence methodology into commerce and 
education. As economic competition accelerates around the 
worl d, private busi nesses are i niti ati ng thei r own "busi ness 
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intelligence" (Bl) or "competitive intelligence” services to 
advise their decisionmakers. Educators in business and 
academia are following suit, inserting Bl concepts into 
professional training and col lege curricula. 

Whereas businesses in the past have concentrated on 
knowing the market and makingthebest product, they are 
shifting their focus to include knowing, and staying ahead 
of, competitors. This emphasis on competitiveness requires 
the sophisticated production and use of carefully analyzed 
information tailored to specific users; in other words, 
intelligence. But the use of intelligence as a strategic 
planning tool, common in government, is a skill that few 
companies have perfected . 1 

Although Bl practitioners refer to the national security 
model of intelligence, they do not seek to conduct secret 
intelligence operations, which are limited by law to 
government authorities. Large corporations are creating 
their own intelligence units, and a few are successful at 
performing analysis in support of strategic decisionmaking. 
The maj ori ty of busi nesses havi ng some fami I i arity wi th B I 
are not able to conduct rigorous research and analysis for 
value-added reporting, so they are hiring Bl contractors, 
"out-sourcing" this function, or establishing their own 
intelligence units. The implication of this trend is that Bl 
professionals should be skilled in both intelligence and in a 
busi ness di sci pi i ne of val ue to the company . 2 

Demand in the private sector for intelligence skills can 
be met through the application of validated intelligence 
practices of the intelligence community. Conversely, the 
business perspective on intelligence can be highly useful to 
government intelligence professionals. Asa Bl practitioner 
explains, every activity in the intelligence process must be 
related to a requirement, otherwise it is irrelevant . 3 
Government personnel would benefit from this practical 
reminder in every training course and every work center. I n 
the private sector, straying from this principle means 
wasting money and losing a competitive edge. The 
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consequences of inefficient national intelligence can be 
costly on an even larger scale, particularly in an 
environment of information proliferation. 

Whereas government practitioners are the 
acknowledged subject-matter experts in intelligence 
methodology, the private sector offers a wealth of expertise 
in particular areas such as business management, 
technology, the global marketplace, and skills training. 
Each has valuable knowledge to share with the other, and 
experience gaps to fill. On the basis of these unique needs 
and capabilities, the pubic and private sectors can forge a 
new partnership in understanding their common 
responsibilities. 

Defining the Intelligence Problem. 

Customer demands or "needs," particularly if they are 
complex and time-sensitive, require interpretation or 
analysis by the intelligence service before being expressed 
as intelligence requirements that drive the production 
process. 4 This dialogue between intelligence producer and 
customer may begin with a simple set of questions (Who, 
What, When, Where, Why, and How), and, if appropriate, 
may then progress to a more sophisticated analysis of the 
intelligence problem being addressed. The Taxonomy of 
P robl em T ypes shown i n Tabl e 1 i 1 1 ustrates the factors that 
customers and producers may take into account in 
articulating the nature of the intelligence problem and 
selecting a strategy for resolving it. 

This model enables decisionmakers and analysts to 
assess thei r needs and capabi I ities i n rel ation toa parti cular 
i ntel I i gence seen a r i o. Th i s abi I i ty to establ i sh a basel i ne and 
set in motion a collection and production strategy is crucial 
to conducting a successful intelligence effort. Employing a 
structured approach as outlined above can help producers 
and customers avoid inefficiencies of time and 
effort— particularly in a situation of information 
overload— and take the first step toward generating clear 
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intelligence requirements by defining both the intelligence 
problem and the components requisite for its solution. 



Characteristics 


Problem Types 


Simplistic 


Deterministic 


M oderately 
Random 


Severely 

Random 


Indeterminate 


What is the 
question? 


Obtain 

information 


Hew much? 
How Many? 


Identify and rank 
all outcomes 


1 dentify outcomes 
in unbounded 
situation 


Predict future 

events/ 

situations 


Role of facts 


Highest 


High 


Moderate 


Lew 


Lcwest 


Role of judgment 


Lowest 


Low 


Moderate 


High 


Highest 


Analytical task 


Find information 


Find/create 

formula 


Generate all 
outcomes 


Define potential 
outcomes 


Define futures 
factors 


Analytical method 


Search sources 


Match data to 
formula 


Dedsion theory; 
utility analysis 


Role playing and 
gaming 


Analyze models 
and scenarios 


Analytical 

instrument 


Matching 


Mathematical 

formula 


Influence diagram 
utility, probability 


Subjective 
evaluation of 
outcomes 


Use of experts 


Analytic output 


Fact 


Speafic value or 
number 


Weighted 

alternative 

outcomes 


Plausible 

outcomes 


Elaboration on 
expected future 


Probability of error 


Lowest 


Very low 


Dependent on 
data quality 


High to very high 


Highest 


Follow-up task 


None 


None 


Monitor for 
change 


Repeated testing 
to determine true 
state 


Exhaustive 

learning 



Table 1. Taxonomy of Problem Types. 



Evaluating and Selecting Evidence. 

To prepare collected information for further use, one 
must evaluate its relevance and value to the specific 
problem at hand. When the sources and volume of 
information are proliferating, intelligence analysts face an 
enormous challenge in determining the source and 
applicability of collected information to the intelligence 
issue. Several aspects to consider in evaluating the 
relevance of information sources are reliability, proximity, 
appropriateness, plausibility, and support. 

Reliability of a source is determined through an 
evaluation of its past performance; if the source proved 
accurate in the past, then a reasonable estimate of its likely 
accuracy in a given case can be made. However, ifthesource 
is completely untested, then evaluation of the information 
must be done solely on its own merits, independent of its 
origin . 5 Proximity refers to the source's closeness to the 
information. Thedirect observer or participant in an event 
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may gather and present evidence directly, but in the 
absence of such firsthand information, the analyst must 
rely on sources with varying degrees of proximity to the 
situation. Appropriateness ofthesource rests upon whether 
thesourcespeaksfrom a position of authority onthespecific 
issue in question. Plausibility, or expectability, isthedegree 
to which, based on prior knowledge, the analyst would 
expect the information to be true. Finally, support is the 
degree of confirmation for the information from other 
sources or pieces of information. 

All these factors of source and content contribute to an 
initial assessment of the value of a particular piece of 
information to the intelligence production process. Those 
pieces that are judged to be reliable and useful may then 
undergo further scrutiny in light of customer needs, while 
items of questionable value may be rejected or set aside for 
further processing and comparison with other information. 

Conclusion. 

The intention here has not been to be overly simplistic, 
but to focus on how, in a situation of information overload, 
focusingon basics may be beneficial. I n particular, theuse of 
sophi sti cated model s of i ntel I i gence probl em defi ni ti on , and 
careful selection and evaluation of evidence, may help the 
analyst sift through the growing mountains of information 
to find the real gems. 

Discussion. 

The panelists were asked to comment on two related 
issues: the political nature of intelligence gathering and 
processing, and the notion of a market analogy for 
intelligence consumers and producers. 

The Political Nature of the I ntel I i gence Process. 

Dr. Krizan: The intelligence community, in order to 
maintain continuity amidst political changes, must array 
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its assets against problem sets and use established 
procedures designed to be responsive to the customer. When 
the customer changes or its needs change, the intelligence 
community may be organized enough but not flexible 
enough to respond quickly to those changes. 

Dr. Bobrow: The problem of politics and hierarchy will 
not go away, but the way to remedy it without creating 
excessive autonomy among government intelligence 
agencies is through the market. The intelligence market 
needs intensive competition and low barriers to entry, 
multiple sellers and buyers, high transparency, and 
mobility. The open source world makes it more likely that 
we will face that situation. For example, large firms have 
some influence on American foreign policy in terms of 
shaping the agenda, issues, options, and soon; those firms 
donot relyjustontheofficial intelligencecommunity, infact 
they often try to shape what the community digests. So 
create the market, and let's go with it rather than resist it. 
Otherwise the problem will not go away. The problem is 
compounded by the fact that the customer often is in the 
community— not outside it. The Genoa and Krizan 
approaches are not inherently aimed at a hierarchical 
system; it would be better if everyone had the technologies 
such as Genoa in order to conduct better intelligence 
analysis. That isthe only way we can get close to removing 
the inherent distortions in the market. 

Dr. Fisher: The Genoa approach faces a tough political 
battl e— peopl e do not want persi stence and transparency i n 
t h e i nt el I i gen ce commu n i ty beca u se i t wi 1 1 become cl ea r w h o 
is doing the best analysis. Clearly we understand there are 
hurdles to overcome, but we are just trying to develop the 
technology, and hope the politics will follow. 

The Intelligence Customer and the Market Analogy. 

Dr. Bobrow: We are skirting between the horns of a 
dilemma— of the analyst being too close or too far from the 
intelligence customer. Let me suggest three things. First, in 
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the market analogy, the consumers are not just the 
government, but responsible agents such as the public 
interest, the nation, an ethnic group, and so on. The more 
transparent the market, the more consumers are held 
accountable for having gone out to get the "taste good” 
answer rather than a more informative one. Second, will we 
create a utopian, perfect market? Not entirely, but in this 
new information environment there is a better chance of 
comi ng cl oser to it. Thi rd, peopleal ready goshoppi ngfor the 
answer that will suit, and there are tremendous incentives 
to put forward "good" answers. To change these human 
tendencies, we would have to change the subsequent costs 
and benefits, handled by getting multiple suppliers and 
consumers and a greater chance of later evaluation. 

With a market there is a better chance of the analyst not 
being far out from everyone. Public agents may be 
interested in having a different "take” about the future or 
the present, so there is a possibility of greater diversity. 
Supply diversity is happening anyway, despite 
foot-dragging by the intelligence community. Take the 
example of the business world, where firms looking at 
potential investment sites assess the target from lots of 
angles. Obviously the U.S. Government is taking different 
angles on the same subject, environmentalists would take a 
third angle, and so on. But the notion that a closed 
community can reform itself enough to level the playing 
field is utopian. It can try, but those activities will erode. 
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SESSION 3: 

INFORMATION AND INSTITUTIONAL 
ADAPTATION 

The goal of the third session was to consider what 
lessons the private sector and the armed forces might learn 
from one another in responding to the challenges and 
opportunities of the information revolution. 

“Lessons from Business Intelligence: 
Achieving Strategic and Tactical Coordination 
in Organizations" 

Dr. Cynthia Miree 
Oakland University 
and 

Dr.J ohn E. Prescott 

J oseph M. Katz Graduate School of Business 
University of Pittsburgh 

The issues and instruments of the military and national 
security intelligence communities are similar to those in 
business intelligence. There arefour things that we believe 
are important to compare and contrast between these 
communities. First, there is cost— business organizations 
have more budgetary constrai nts and I i mitati ons than does 
intelligence. Second are outcomes. Failures of military or 
national security intelligence have far more significant 
repercussions than do failures of business intelligence. 
Third, there are ethical issues. Business intelligence is 
much more concerned about ethics, and many 
investigations have been toned down or stopped altogether 
for ethical reasons. Fourth is the sustainability of the 
competitive intelligence department itself. Whereas in the 
national security community one may worry about getting 
the decision-maker's attention, on the business side you 
have to be worried about whether the boss will shut down 
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the whole operation. So what do business organizations do 
to mitigate or avoid some of these problems in competitive 
intelligence? 

This report is based on our study of competitive 
intelligence by Best-Practice Companies (BPCs). Thestudy 
was sponsored by 17 corporations, and we did case studies of 
five BPCs. Most companies that engage in competitive 
intelligence have either a strategic focus or a tactical focus, 
but not both. The overall purpose of this study was to 
examine how the competitive intelligence function could 
assist thesales organization in being more effective, and the 
specific research goal was to determine how BPCs 
coordi nate the strategic and tactical i ntel I i gence process i n 
the sales function. 

We looked at the sales function because it has an 
interesting hierarchy of sales representatives out in the 
field passing information back to the high-level managers, 
who are maki ng strategi c deci si ons about product I i nes and 
marketing, the whole process being mediated by mid-level 
managers. It is interesting to note that this hierarchy 
actually bears a resemblance to the organization of 
i ntel I i gence agenci es. 

There were four main areas of focus in our study: (1) 
organizational structure— how the competitive intelligence 
departments are actually structured; (2) what kind of 
competitive intelligence knowledge they are creating in 
their sales and marked ngfuncti ons; (3) how they coordinate 
strategic and tactical competitive intelligence; and (4) how 
they measure the results of the competitive intelligence 
against the demands of their "consumers." 

Our first key finding was that companies that both (1) 
establish coordination of strategic and tactical intelligence 
as a priority, and (2) are able to articulate the formal and 
informal processes that are used to achieve coordination, 
are more likely to achieve coordination than those who do 
not establish coordination as a priority and are not ableto 
articulatetheir formal and informal coordination processes. 
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Our second key finding was that in most BPCs, the 
coordination of strategic and tactical intelligence in the 
sal es fu ncti on i s faci I i tated through the soph i sti cated use of 
coordinating mechanisms we have labeled the TAP-IN 
process: Teams and Technology, competitive intelligence 
human resource Allocation, the role of competitive 
intelligence in the strategic Planning process, the 
Interaction between competitive intelligence and top 
management, and the use of human Networks. 

There are several fundamental issues in TAP-IN: 

• Consistency across TAP-IN mechanisms; 

• Hierarchy of importance for TAP-IN mechanisms; 

• Level of sophistication for each TAP-1 N mechanism; 

• Effect of hierarchy on presence and use of TAP-IN 
mechanisms. 

The first mechanism of TAP-IN is Teams and 
Technology. Within BPCs, organizational processes are 
enabled and managed by teams and the use of information 
technology. The competitive intelligence groups are 
represented on most important strategic and tactical teams 
within the organization. Either technology is used to bring 
individuals together geographically, or used as depositories 
for information. BPCs tend to use technology for oneor the 
other, but not both equally— usually a 80/20 split. 

Second is the Allocation mechanism. Competitive 
intelligence human resources are explicitly designated for 
assignment to strategic and tactical activities through job 
design. That is, human resources are carefully allocated to 
where they are most needed. One example we studied was 
the MetLife company, where one competitive intelligence 
expert is strategic and the other two are tactical, making 
sure their sales representatives can win bids. 

Planning is the third TAP-1 N mechanism. Competitive 
intelligence input is embedded in the strategic planning 
process. We looked at several organizational examples of 
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this. At Boehringer, strategic planners solicit competitive 
intelligence inputs from business intelligence and from 
their sales force, while at MetLife they use a competitive 
intelligence database and competitive landscapes in 
strategic planning. At Dow Chemical, competitive 
intelligence input is represented both directly and 
indirectly in the strategic planning process and Dow's 
value-based planning process, which evaluates the 
contribution of strategies to stock market value. 

Interaction, in the form of dialogue, is the primary and 
preferred method of communication in BPCs;theyaremuch 
less interested in putting out certain types of intelligence 
products. For example, Amoco is trying to implement 
common mental models across decisionmaking and 
competitive intelligence. At their strategic planning 
meetings, they do not bring in competitive intelligence 
products the first day, but debate issues and what they 
mean in a face-to-face forum. Both MetLifeand Boehringer 
emphasize frequent face-to-face conversations with 
internal customers, particularly strategic internal 
customers. 

The fifth TAP-IN mechanism is Networking. In BPCs 
the establishment and use of internal and external 
networks are expected and reinforced. The companies that 
do competitive intelligence best are able to coordinate their 
internal and external human intelligence networks. Some 
com pa n i es, I i k e B oeh r i n ger , eva I u at e a n d sel ect com pet i t i ve 
intelligence personnel based on an employee's networking 
skills and the possession of viable internal and external 
networks. Dow is establishing and leveraging networks 
over time to enable speedy access to information in a global 
company. 

In conclusion, Best-Practice Companies, which do not 
have the budgetary or human resources of the government 
intelligence community, are creating unique organizational 
methods and forms to bring together strategic and tactical 
intelligence in cost-effective ways— the TAP-1 N process- 
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that improve the companies' competitiveness and 
capabilities in the rapidly changing and information-rich 
global market. 

“Multilateral Institutions in the Global 
Information Economy" 

Dr. William Drake 
Director 

Project on the I nformation Revolution 
and World Politics 

Carnegie Endowment for International Peace 

I would like to begin with some comments on the 
information revolution (IR) and the new interest in its 
impact on international relations. I will add some comments 
on multilateral institutions and the global information 
economy, and talk about some of the reasons why they have 
had a particularly difficulttime adapting to thelR. I think 
that this has i mportance and relevance beyond the real m of 
communications and information policy, becausethe nature 
of the global information infrastructure and how it is 
managed impact the kind of I R we have on a worldwide 
scale. Changes in the governance of information and 
communication at the multilateral level have had a major 
impact on the structure of the global economy and the 
worldwide shift toward the I R. I will conclude with several 
points on the IR and how it impacts international 
cooperation and global governance. 

The IR and World Politics. 

There has been a striking lack of interest by political 
scientists in the IR and its impact on national security, 
although this isfinally beginning tochange.J amesRosenau 
is one of the few who have actually studied this, and in 
Washington, DC, there are some folks in the think tanks 
who are begi nni ng to study these i ssues. 
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There are a number of significant impediments to good 
analysis of the I R's impact on world politics. First, creative 
thinkers on the IR are widely scattered across the 
disciplines. There is interesting work being done in 
business, communication studies, sociology, and some, 
though much less, in political science. But most of these 
thinkers are not conscious of the international relations 
consequences of the I R. 

What is striking about this void in political science is 
that almost every day in the nation's leading newspapers 
there are front page articles about the Internet or some 
aspect of globalization or the I R, and yet somehow when you 
read the political science journals you do not see much 
mention of this phenomenon. This is partly due to political 
science's concern with creating certain kinds of theoretical 
constructs and with maintaining the methodological 
discipline of the field. Problems which do not lend 
themselves to the traditional methodologies are not well 
received, even though much of the globalization and 
communication phenomenon can be measured quite easily. 
Political scientists dismiss the IR as a change in the 
"exogenous variables" that impact in some unspecified way 
people's political preferences, but which as a whole have not 
changed the nature of world politics. 

Second, there i s a ki nd of "two cu I tu res" probl em— there 
is no shared language or vocabulary between technical and 
national security experts. Among those seriously studying 
the issue there is a growing recognition of the important 
connections between these two fields. This tribalism is 
mirrored in government circles. People in national security 
I i kethose i n the Department of Defense and the i ntel I i gence 
community are thinking about the IR, but the State 
Department is far behind— the culture of information 
management and dissemination in State is not good for 
understanding the I R. 

Third, there are a lot of interesting questions about 
international politics which are not being asked. Thereare 
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systematic questions about the impact of the IR on the 
i nterstate system, on the global distribution of power and 
wealth, on the vertical levels of sovereignty, on individual 
state units, and on democratization and globalization. One 
largely unexplored area is the foreign policy decision- 
making implications of a hypermedia environment— -the 
government can't control how issues are framed, who 
generates information, etc. We really need a broad 
interdisciplinary debate on these kinds of questions. 

Conceptualizing the I R. 

Contrary to the conventional wisdom, the IR is not 
fundamentally or primarily about technology— it is about 
human agency. Technology does not drive anything 
independently, or else similar technologies would have 
meant similar socio-political outcomes in states with 
similar technologies, but that is not what we have seen. 
Technology provides us with sets of tools, it facilitates 
certain types of transactions, and it changes some of the 
trade-offs between different paths of activity, but it does not 
ultimately do anything by itself. 

If you look at the hi story of the I R, I think it is much more 
i mportant to focus on the actors and the dynami cs of control 
over the information environment. Over the past 50 years 
we have seen in the economic sphere an effort to privatize 
information in a way that changes who is able to make 
decisions on economics. This is the beginning of some 
fundamental transformations that wearejust beginningto 
see more clearly. 

The IR really evolved through three main stages. The 
first phase was from 1837 to 1963, and was marked by the 
telegraph and radio. In that era, large suppliers 
(communications monopolies) exercised great control over 
how information sources were constructed and configured. 
Systems tended to be large and centralized. The second 
phase began in 1964 with the success of the IBM 360 
computer for commercial customers, and ended in 1990. 



53 




This period saw the shift in authority and influence from 
suppliers to large corporate users (such as banks and 
automobile manufacturers) who demanded specialized 
communications systems and services. The third phase 
began in 1991 and might be called the "distributed" era, 
initiated with the privatization of the Internet backbone. 
Technological tools in the hands of governments and 
corporations are now diffused at low cost through many 
players in economic and other spheres. This is a 
qualitatively important shift that people have not grasped. 
Nongovernment organizations (NGOs), organized crime, 
and terrorists have an unprecedented ability to create and 
disseminate information on a worldwide scale that 
challengesthestate. I n this new realm of world politics, a lot 
of the old rules do not seem to apply any more. 

The IR and Multilateral Institutions. 

In terms of global communication, we have witnessed an 
evolution in how governments adapt multilateral 
institutions. In the first period there were cartelized, 
intergovernmental, state-controlled systems which 
essentially excluded the private sector from authoritative 
decisionmaking. The markets for communication 
technologies were largely regulated by governments for 
their own purposes. In the second phase, there came a 
demand for liberalization to include nongovernmental 
actors, open up markets to competition, and allow 
specialization for businesses in goods and services. This 
produced a fundamental bifurcation between thestatus-quo 
interests of government and monopolies, on one hand, and 
the open-market interests of a newly emerging coalition, on 
the other. This, in turn, caused a significant shift out of the 
stable, consensual, bureaucratic approach in global 
communications, which had ruled for a 100 years, to a 
conflictual, trade-driven and highly-politicized environ- 
ment. 



54 




In the third phase— the present— governments are 
struggling to adapt existing multilateral institutions and 
regimes to the information economy, while creating new 
regimes for the I nternet, e-commerce, and so on. But they 
are facing enormous difficulties in this because there is no 
agreement on howtomanagethesefundamental issues on a 
global scale. The point is that with the distributed I R, the 
abi I i ty of govern ments to adapt to the new ru I es of the game 
is deteriorating. There is a decoupling between traditional 
forms of governmental authority at the international level 
and what's actually happening in technology, markets, and 
social practices today. Traditional regimes are losing their 
ability to control or shape what people do with information 
technologies on a global scale, and we are moving into a 
chaotic, heterogeneous, diffi cult-to-forecast environment. 

Conclusions. 

There are other challenges for global governance posed 
by thelR. First, thellnited States is becoming the driving 
forcein international politics, but it has less todo with state 
power than with the power oftheprivatesector, technology, 
andcivil society. TheAmeri can privatesector is driving a lot 
of global activities. There is always a tension between 
systemic interests and particularistic interests in the 
United States, and we tend to advance particular (private) 
ones of powerful organizations under the guise of systemic 
(public) interests, and others often do not buy in. 

Second, the I R has created a growing empowerment of 
nontraditional actors and issues, such as human rights, 
landmines, the environment, and women. NGOs are 
becoming real players in international politics, using 
information technology to give them far greater influence 
than they otherwise might have; small organizations 
without deep pockets are now able to be much more 
aggressive and influential than traditional theories of 
international relations would have predicted. The pressure 
for transparency in multilateral and international 
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organizations, for opening up to these kinds of actors, is 
going to bea permanent feature of international politicsin 
the future. 

Third, in many cases, the traditional forms of 
intergovernmental ism will be inadequate to deal with 
future issues on a global scale. We need new efforts to build 
cooperati ve br i dges such as gl obal pu bl i c pol i cy networks to 
share activity and authority with nongovernmental 
entities. 

The IR, not by itself but in conjunction with other 
political, social, and technological factors, is going to make 
global governance more difficult. Intergovernmental 
frameworks will not be able to adapt, the result being 
turbulence in world politics. 

“Lessons from the Military Experience: 

The U.S. Military and the I R: The Pitfalls 
of Uneven Adaptation" 

Dr. Steven Metz 
Strategic Studies Institute 
U.S. Army War College 

Like any large, complex organization, the U.S. military 
has been buffeted by the Information Revolution (IR) and 
found adaptation difficult. In many ways, what has 
happened to the U.S. military in responding to the I R is 
similar to what has happened to business, to governments, 
and to nongovernmental organizations. But there are 
crucial differences about military adaptation that we need 
to keep in mind. If business gets it wrong in terms of 
understanding and adapting to the I R, some investors lose 
money, managers lose their jobs, and the business fails. If 
government gets it wrong, political appointees change, a 
new party gets elected, and so on. But if the military is 
wrong, people die, national interests suffer, and perhaps 
even nations will crumble. These high stakes in 
understanding and adapting to the IR make attempts to 
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study the effect of the IR on the military all the more 
important. 

Lookingat how the military during the past lOyearshas 
adapted to the I R, we fi nd that the success of the mi I itary 
has been somewhat uneven. When it comes to taking new 
technologies and applying them to traditional military 
functions, thell .S. mil itary has been quite successful . When 
it comes to mastering new roles and missions that emerge 
out of the I R, the military has been moderately successful. 
But when it comes to understanding the I R and the need to 
adapt or adopt new organizational structures, the military 
still has a long way to go. 

We should begin with the least painful change— the 
ways in which the military services have taken new 
technology and applied it to their traditional missions. In 
trying to understand the IR, the services and the 
Department of Defense (DoD) have largely focused on 
conventional warfighting. This is what they spend the most 
time thinking about, so it makes sense that this is where 
they have been most successful. On a conceptual level, the 
I R has forced the military to think futuristically. There is 
probably noother large organization on earth which has put 
more resources and brainpower into thinking about the 
future than thell.S. military. This began several years ago 
in all oftheservicesand isseen in concepts such astheArmy 
After Next. The J oint Forces Command, the Marine 
Warfighting Lab, and other facilities are conducting 
experiments, wargames, seminars, and conferences to look 
at how the I R impacts warfighting. The official thinking is 
thatthel R allows thell.S. militarytodothesamejobit has 
always done, but to do it better. 

The future battlefield is the second area where the 
military sees the IR having an important influence. The 
mainstream position (taken from Major General Robert H. 
Scales, J r., the former Commandant of thell.S. Army War 
College) is that the future battlefield will be characterized 
by high speed, adaptability, and agility, and that more 
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accurate and timely information will lead to speed and 
precision of operations. The conceptual template for this is 
found in J oint Vision 2010, which is designed to create a 
mil itary with "ful I spectrum domi nance''— the idea that the 
U.S. military will be better than any conceivable enemy in 
any conceivable type of confl ict. 

This dominance begins with information superiority. 
The military's goal is to create a near-perfect, seamless link 
between information collected on the battlefield, the 
decisionmaker using it, and the action taken to implement 
the decisions. Military commanders in the past have always 
been looking through the fog of war, and if one considers 
Napoleon at Water loo or any other battlefield commander in 
history, it is interesting to consider whether, with better 
information, they might have made better decisions. 
Through better technology and new concepts, the military 
wants to see through thefogof war. Thegoal istoprovidea 
commander with a perfect picture of the battlefield and 
thereby enable him to make nearly perfect decisions. An 
important and unanswered question, however, is whether 
information superiority and full-spectrum dominance are 
actually feasible. 

The mi I itary has had moderate success in adapting new 
roles and missions to the imperatives of the IR. There are 
two new areas which are particularly worthy of comment. 
First is the broad category of information operations.The 
military has been trying to adapt its institutions somewhat 
toward the goal of attaining information superiority. One 
thi ng the mi I itary has done i s to gi ve j oi nt responsi bi I ity for 
information operations to U.S. SpaceCommand, and all the 
services are involved in information operations. The 
argument that we need a fourth service to handle 
information operations will likely intensify in the future. 
Within information operations there are three important 
missions: 

• Information-in-warfare, which addresses the role of 
information in conventional activities, such as intelligence, 
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surveillance, and reconnaissance. The military has always 
done these things, the new technology just enhances its 
capabilities. 

• Offensive info war, which includes physical attack 
against the enemy's information assets, electronic war like 
jamming, psychological operations, information attacks 
(cyberwar), and military deception. This is one of the most 
controversial elements of information operations because of 
the range of legal, political, and ethical questions associated 
with it. There were several stories in the media on theuseof 
information warfare in Kosovo, but there were conflicting 
claims about the extensive use of offensive information 
warfare and claims that such operations were considered 
but were not used. Because of the interconnectedness of 
global information systems, there is a significant problem of 
control over the effects of cyber-warfare. Both current and 
future information technologies do not match well with the 
legal, ethical, and political frameworks we currently use to 
govern armed conflict. 

• Defensive information warfare, which includes 
operational security, counter psychological operations, 
electronic protection, information assurance, and 
counterdeception. 

The second new mission is critical information 
protection, where we face new vulnerabilities as well as 
empowerment. There is a great deal of concern over how the 
United States can protect its critical information 
i nfrastructure. The mi I itary certai nly has a role i n this, but 
it is not well -defined so far, particularly regarding the use of 
mi I itary capabi I iti es to protect commerci al i nfor mati on. 1 1 i s 
clear that the reserve components will be important, but 
this mission is rife with potential problems. It raises some 
serious issues of civil-military relations, including 
distinctions between thetwo sectors and thefunctionsthat 
are appropriate for the military. 

Organizational adaptation is the area where the 
military has been least successful. The good newsisthatthe 
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IR facilitates internal communication, training and 
leadership development, and planning. There are 
discussions now of creating virtual staffs; instead of needing 
all of the planners to be in one place at onetime, you can 
have them linked electronically and hopefully include the 
best possi bl e i nfor mati on and anal ysi s. N ew trai ni ng efforts 
include advanced simulations, distributed learning, and so 
on . I n those areas the mi I i tary has adapted wel I . 

The bad news is that the I R challenges hierarchies and 
bureaucratic organizations— it erodes old notions of 
centralized control that are the bedrock of military 
organization and function. It is plain that flat networks 
have ser i ous advantages i n adaptabi I ity and f I exi bi I ity over 
rigid hierarchies in dealing with the new information 
environment. The U.S. military has not really dealt with 
this problem, or tried to think about how it might react in 
the future to nonstate, networked enemies. Take, for 
example, the struggle against drug trafficking 
organizations, which are highly flexible and adaptable 
networks, and the way in which the U.S. Government 
(including law enforcement) is trying to respond with 
bureaucratic and hierarchical means. The military admits 
the need for hybrid organizations— part hierarchical and 
part networked— but it has not yet fleshed outtheconcept. 

Let me conclude with a couple of observations. First, 
today the U.S. military is far ahead of every other state 
military in theworld in understanding and integrating the 
IR. Other state militaries are way behind in all facets of 
technology, organization, tactics, and strategy. Second, the 
Air Force and Marine Corps have done the best job of 
understanding the IR and adapting to it. Why is the Air 
Force so adaptable and quick to understand the 
opportunities of the IR? In part because the Air Force's 
guiding concept of strategic bombing is about defeating the 
enemy but not necessarily its military forces in the field. 
Strategic information warfare could be considered a 
modification of the same idea, allowing you to attack an 
enemy's i nfrastructure di recti y without havi ng to defeat his 
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military. The Marines' advantage is that smaller 
organizations are often more adaptable, and recent 
leadership has placed a premium on innovation and 
creati vi ty. Thi rd, nontraditi onal , fl exi bl eenemi es whi ch are 
networked will be the military's biggest challenges in the 
future, not traditional enemies. 

Finally, the I R is simply the first phase in the larger, 
historic Revolution in Military Affairs (RMA). The next 
stage will likely be marked by the merger of information 
technology with things like robotics, biotechnology, and 
extreme miniaturization. Most revolutions have three 
phases: a moderate step, a radical step, and consolidation. 
We are right in the middle of the moderate phase, taking 
new technologies and grafting them onto old ideas. But 
eventually the radical phase will emerge. 

Sowhilethell.S. military is likely to succeed against any 
other traditional state military in terms of adapting to new 
tech nol ogi es, the f utu re may bel ong to non-state actors. We 
may be in the middle of a historic RMA, where the I R was 
simply the spark. If so, everything we know about the 
natureof war may be changing. Right nowthell.S. military 
has elaborate programs to look at that possibility, but the 
implications of it still remain to be seen. 

Comments 

Dr. Paul Hammond 
University of Pittsburgh 

One of the questions of relevance in integrating such a 
panel is bringing together a panel's presentations, and I 
would like to share some thoughts I have on the issue of 
institutional adaptation. 

First, the military has often been way ahead of the 
business world, in part because ofthescaleoftheir work and 
the enormous amounts of money spent on 
information-related problems. There is an important 
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historical point here. In 1961, Secretary of Defense Robert 
McNamara hired a man to do a "program” budget for the 
Department of Defense (DoD). The critical thing for the 
budget was that it separated the accounting system 
required by Congress from the information system that DoD 
used. He didn't follow Congress's guidelines on how money 
was to be spent; hegot rid of input-oriented rulestofocuson 
better output-oriented programs. The program budget 
model included new analytical techniques that allowed the 
consi derati on of budget alternati ves, yet thi s al so requi red a 
great deal more information. This was a giant step towards 
management-oriented information systems, which werenot 
just systems safe for a steel company to see how production 
was going, but could tell you how the company was doing 
from the view of the top. This innovation did not require 
gee-whiz information technology, but it was an important 
beginning. 

Dr. Prescott spokeof information-oriented people, salted 
throughout an organization, networking internally and 
externally. This is a profound step beyond McNamara's 
approach, which was still directed toward internal DoD 
information. In the business world you also look outside. 
The missing step between the DoD model and Dr. Prescott's 
Best- Practice Companies is that during the 1960s and 70s, 
businesses had in-house research and development (R&D) 
organizations. When they came up with innovations for 
products and processes, the source usually was outside of 
the firm. Networking was the rationalefor doing the R&D 
even if it benefited others; networking enabled companies to 
find the innovations they wanted. What we see now is a 
more extensive networking system with costs that are not 
tied primarily to R&D itself. 

Second, there is a question of how to get an advantage in 
zero-sum games. There are two kinds of problems from 
information distortion and manipulation in information 
systems. First, we should consider reliability. In the 1950s, 
thell.S. Air Forcespenta lot of money on building command 
and control systems, and they learned then that garbage in 
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equals garbage out. Unless these systems had benefits to 
the information providers, the providers gave them 
garbage. Low-level information sources knew morethan the 
top levels did, and the system did not run well. How do you 
get reliable information? One possibility would be a library 
system in which providers benefit from the information, so 
they havean incentive to do better. We probably do not have 
this kind of system today. The second problem of 
information distortion can be seen in adaptations to 
information technology. Surely we should expect toseenew 
ways for distorting information, manipulating people, and 
so on, where people will take advantage of information 
systems. Oneof the goals of our information systems should 
betoensureaccurateinformation, whether it isattheinput 
stage, the analysis stage, or final usage. 

Discussion. 

The panelists were asked to reflect on several issues: 
public perceptions and opportunities for asymmetrical 
attacks through media relations; reliable information 
versus perfect information; the appropriate public relations 
role for the military; and the proactive or reactive 
tendencies of business and the military. 

Public Perceptions. 

Dr. Metz: The defining feature of war in the information 
age is that the political-perceptual element is as important 
as what actually happens— what you make your own people 
think and other audiences, not just the enemy. Maybe the 
model for future symmetric warfare is not Iran-lraq, but 
I ndia-Pakistan proxy-conflict with air strikes, posturing, 
and perceptions management. The United States in the 
future is going to face enemies like Somalia, who really 
understand our psyche and can be more effective in fighting 
us. Saddam did it badly, and Milosevic, though it looked 
early on I ike he understood, also failed. Future enemies will 
understand us better, and their future leaders are students 
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in our col leges today who will havea savvy understanding of 
the United States. 

Dr. Drake: We now refer to "audiences" when discussing 
war, and we lose sight of metrics for measuring assump- 
tions. Now we are thinking about wars that involve global 
audiences needing satisfaction, not just for national 
security reasons but for politics. We struggle with the 
probl em of i ssue management, tryi ng to fi nd ways to frame 
issues in real time, but it usually takes a long time to 
respond. Thanks to CNN, others get to shape the response 
first, andtheUnited States responds belatedly. Weneedto 
antici pate better. 

Dr. Metz: This presents a broad-based challenge to the 
pol i t i ca I u t i I i ty of f or ce. T h e mi I i ta ry 's f ocu s on pr eci si on a n d 
consideration of nonlethal technologies are designed to 
maintain the political utility of force. 

Dr. Prescott: Businesses have been dealing with this on a 
smal I er seal e but morefrequentl y than the mi I i tary, and the 
military needs to get over its arrogance of not I earning from 
the business community. 

Dr. Hammond: Such arrogance may have been justified 
at one point, but now the "off-the-shelf" that the military 
should consider is not technology but organizational 
practices as outlined by Dr. Prescott. 

Reliable Information or Perfect Information? 

Dr. Metz: The answer is both. The offense/defense 
question has now shifted to a tension over hiding versus 
finding. The military says we should plan for that mission, 
building redundant sensors, utilizing data fusion, etc. So 
the military thinks it will beabletoget perfect information, 
but I do not think it is going to be possible. Better finding 
will lead to better hiding technology. 

Dr. Prescott: In the business world, competitive 
intelligence and competitive intelligence organization are 
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dynamic capabilities which allow firms to learn, to 
reconfigure themselves, to combine with other functions. 
Competitive intelligence gives decision-makers a better 
way of usi ng i imperfect i nfor mati on . 

A More Active Public Relations Role for the 
Military? 

Dr. Hammond: The military has good reason for not 
bei ng out i n front— it needs to preserve its nonpartisanshi p. 
Whilewe think the military wants, and istrying, to get its 
message across, the costs of trying to be the spokesman 
make leaders reticent about getting out in front. However, 
in thefuturethat boundary may have to be shifted. 

Who Is More Proactive: Business or the Military? 

Dr. Prescott: The business community is not ahead of 
government intelligence agencies in ter ms of discipline, but 
it is better in innovation and lack of departmentalization. 
Business managers will not put up with 
compartmentalization, and the speed and quality of 
deci si onmaki ng are better i n busi ness than i n the mi I itary. 

Dr. Metz: The costs of failing in business are much less 
than the military's costs of failing, so it is easier for business 
to be flexible and adaptable. 
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SESSION 4: 

SIGNALING AND PERCEPTION 
IN THE INFORMATION AGE 

Dr. Robert J ervis 
Adlai E. Stevenson Professor 
of International Politics 
Columbia University 

Dr. Williams invited me to speak about signaling and 
perception in the I nformation Age, and I would I iketo make 
some remarks that I hope will contribute to today's 
discussion. In his introduction, Dr. Williams made 
reference to several of my books, including my first, The 
Logic of I mages. If you arefamiliar with it, you know that it 
i s about how actors, mostly states but i ncl udi ng anyone, try 
to project desired images of themselves to get others to do 
what they want them to do. Those images can be true, or 
they can be deceptive. Then I did a later book, Perception 
and Misperception, showing that in theory these two are 
very much i nterrel ated. They aretwo si des of the same coi n, 
because when I am perceiving, I am trying to make certain 
inferences about the sort of actor you are, your intentions, 
your character; and when I am giving off behavior to try to 
project images, I am trying to influence you. When I am 
perceiving, I want to understand your projection strategy; 
and when I am projecting, I want to know how you are 
perceiving. Sothetwo should fit together. However, my two 
books do not fit together at all either in substance or in style. 
The one on images is quite inductive and partly utilizes 
rational choice theory (before it became a theory), and the 
perception book is much more social -psychological. 

Now what makes this morethan a personal anecdote is 
that as the two subject areas have developed, they have 
really maintained a zone of separation. One other note on 
theacademicliterature. I nthelast 15yearstherehasbeena 
lot of work done in economics based on signaling models, 
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and they are almost entirely deductive and descriptive, and 
quite often useless, because they are totally unempirical 
and unpsychological, and unfortunately do not get to the 
heart of the matter. 

These two areas need to be brought together better, 
keeping in mind several things we tend to lose sight of. 
F i rst, actors al most al ways want to proj ect desi red i mages of 
themselves. An important book in this regard is Erving 
Goffman's Presentation of Self in Everyday Life (1959), a 
sociological classic. Second, the possibility of deception is 
always present. Anyone who has been a university 
administrator isfamiliar with how much deception thereis 
in the world. Now if we look atthell.S. Government, from 
what we do know from declassified sources, there are a fair 
number of deception operations. But if we ask how alert is 
the United States and the intelligence community to 
deception by others, particularly in peacetime, I think the 
answer is remarkably slight. Part of the problem is that it is 
very hard to deal with deception, when you are really just 
trying to get a sense of what is going on in the world, and 
there is so much noise in the system, so much overload, so 
much ambiguity. For intelligence analysts and policy- 
makers, when you try to layer deception schemes on top of 
that, it may be that the only things you have to latch onto 
may be totally misleading. It tends to erode your ability to 
act. Third, which I will come back to, different people have 
different theories through which they interpret the world, 
different mi ndsets. T hi s tends to be I ost si ght of when peopl e 
send messages. 

Let me give you one example based on the infamous date 
of December 7, 1941. As World War 1 1 buffs know, about 24 
hours before the J apanese attack on Pearl Harbor, 
Washington sent a message to Pearl Harbor saying they 
should be alert for a J apanese attack, even though 
Washington was confident the attack was coming in the 
Philippines. The people in Pearl Harbor received the 
message, they understood it, and they thought there was a 
very high chance of going to war, too. Sothey put the base on 



68 




full alert for sabotage, which meant among other things 
putting all the airplanes together in the middle of the 
tarmac. What went wrong was that from the perspective of 
Pearl Harbor personnel, the pressing day-to-day danger 
was J apanese sabotage. There was a large J apanese 
community there, the Americans knew they were under 
surveillancebythej apanese, and, if there was going to be a 
war, the obvi ous thi ng for thej apanese to do was to commit 
sabotage. Washington was concerned with more global 
issues I i kethe P hi I i ppi nes, and sabotage was smal I potatoes 
to them. But note what is really important at the second 
level. Pearl Harbor did not know what was the pressing 
information that caused Washington to be so worried, and 
the people in Washington could not put themselves in the 
place of the military leaders at Pearl Harbor who, in doing 
their duty, had to be worried about things like sabotage. 
This is the story of a great deal of signaling and perception, 
certainly in the realm of international politics, and in other 
realms as well. 

For the moment, I will usetheterm "signals" generally, 
although there are distinctions among different types of 
signals. The meaning of signals always comes in the eyes 
and head of theperceiver. That is obvious, but it tends to be 
lost sight of. It also means that people think differently, 
perceive differently, and will have many interpretations of 
various actions that are familiar, but also ones that are 
strange. Let me give an example that is too good for me to 
have made up. Several years ago, before Monica Lewinsky, 
there was the Paula J ones suit, which President Clinton 
underplayed for a while. But then he hired Robert Bennett 
as his lawyer. Two things happened as a result. One was 
that the case suddenly got much more publicity in the 
Washington Post. According to a Washington Post editor, 
the question was: if Paula J ones had no case, how come 
Clinton needed to get a hired-gun like Bennett? I do not 
thi nk Cl i nton quite real ized that was the message he was 
sending. The other thing that happened, and it was 
seemingly quite unrelated, was that the U.S. dollar was 
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greatly strengthened in the currency markets. According to 
a currency trader, "Clinton's hiring Bennett was really a 
boon for the dol lar." Why? "We were starti ng to lose faith i n 
him, and that helped turn things around." 

What this is tel ling us, and this may bean extreme case 
(although the Pearl Harbor case may not be extreme), is 
that signalers have two problems. One, which I will return 
to, is knowing what is in theother person's head. Two, any 
message conveys meaning at two different levels. First 
there is the message that is being conveyed, and the second 
isthefactthatthesenderfeelsthat heor she needs to send a 
message. Let me give another example. In most restaurant 
restrooms, there is a little sign over the wash basin saying 
"employees must wash their hands after using the toilet." 
What message does this send? To the customer, it appears 
that the restaurant is hiring peopletoo dumb to know that 
this is what they are supposed to do, so the restaurant put 
the sign up to tel I them. This is probably not the message 
they want to convey. Similarly, in some situations when a 
currency is weakened, or a bank is giving off some 
disturbing signs, lenders or investors may come out with a 
statement that they have "confidence" in the solidity of the 
bank. Or, when university presidents get in trouble, 
sometimes the board of trustees will issue a statement that 
they have great confidence in the leadership of the 
president. On one hand, you might believe them, but on the 
other wonder why they need to say that. 

How would we feel if the American and French 
presidents issued a statement that there were no 
differences between their countries that could not be 
resolved by peaceful means? Universities have recently 
instituted teaching awards, not to impress students, who 
know better, but to impress the trustees and donors with 
how seriously they take teaching. If the university does take 
teaching seriously, it should not have to have the awards. 

There are a great many messages which have this 
problem. But there is even a second layer, because once you 
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issue a "reassuring” message, it becomes somewhat 
expected. Returning to the example of the university 
president, if it is expected that, when they get introuble,the 
board will make a statement of confidence even if they do 
not have it, then if the board later decides that the 
statements are meaningless or counterproductive and 
decl i nes to make them, then the i nter pretati on i s that the 
president really is in trouble. So there are a great many 
difficulties arising from the fact that signals exist on those 
two I evel s. 

Let meturntothecrucial problem first of how the impact 
of signals by definition depends on how they are perceived, 
and secondarily that this is often unrealized. Many think 
the best moviefor international politics is R ash omon (1950), 
and I absolutely agree. It is the story of four people involved 
in acrimewhoall see it very differently. Recentlytherehave 
been a number of conferences between Americans and 
former Soviets, between Americans and Vietnamese, going 
back over Cold War incidents and bringing together the 
different sides. Leaving asidethe numerous problems with 
these, they reveal the tremendous differences in what the 
si des bel i eved and how they i nter preted the others' motives. 
It really confirms a great deal of Rashomon. Take, as an 
example, how foreign diplomats have a meeting and then go 
away and write up separate memos about the same 
meeting. Forty or fifty years later sometimes it is possible to 
get the documents from both sides to compare them, and 
they are often j ust wi I dl y different. They tend to report more 
about what they said than what the other side said. They 
tend to allege hesitancies on the other side, and frame it all 
in terms of the objectives they were trying to meet. 
Sometimes you want to ask ifthisiseven the same meeting 
because the differences are so great. 

Ernest May, a great historian, has done an interesting 
book on the Spanish-American War. He notes that 
President McKinley's speech to Congress was meant to 
convey a very strong message to Spain; there are several 
paragraphs that are obviously the gist, and the rest is just 
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packaging. May went to the archives in Madrid and got the 
cable from the Spanish ambassador, essentially a copy of 
the speech, marked up by the Spanish foreign minister. 
There were extensive markings in the paragraphs that 
McKinley had meant as throw-away lines, there was 
nothing in the margins next tothesections he had meant as 
important. 

We find this phenomenon in domestic politics as well. 
Historian Richard Immerman and political scientist Fred 
Greenstein, both experts on Eisenhower, had the marvelous 
idea of going back to look at the conversation that Kennedy 
and Eisenhower hadtheday beforethe inaugural. Kennedy 
had been briefed by E isenhower a coupleof days beforethat, 
Eisenhower had touched on Southeast Asia, and Kennedy 
was disturbed enough about it to ask Eisenhower for a 
second briefing just on Southeast Asia. The way in which 
this meeting comes down to us in the Schlesinger and 
Sorensen books is that Eisenhower says it would be 
unfortunate if we had to send ground troops into Asia 
(although really moreLaosthan Vietnam), but ifthechoice 
is having to lose Laos or Vietnam or sending ground troops, 
then we have to send ground troops. There was no tape 
recorder in the Oval Office, at least not one running that 
day, but I mmerman and Greenstein found four memos of 
the conversation: Clark Clifford's, McNamara's, 
Eisenhower's, and yet a fourth. None of them say what is in 
the Schlesinger and Sorensen books, not surprisingly. They 
al I say somethi ng quite different, they contradi ct each other 
on many points, they focus on what the person taking notes 
is most concerned with, and the final twist is that because 
Immerman and Greenstein know Eisenhower well, they 
thinktheycan reconstruct what heactuallysaid. But that is 
after studying him for 10 years, something no one in the 
room could, and they all came away with very different 
impressions. 

The second order problem is that people rarely realize 
this. Putting it most simply, empathy is extremely difficult. 
T o understand the other person's mi ndset, thetheori es they 
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have, the way they see the world, is difficult, especially 
when they view you— as an individual, a corporate actor, or 
a cou nt ry— ver y d i ff er ent I y f r om h ow you vi ew you r sel f . So a 
couple of other examples. One of the biggest surprises we 
have found since the opening up of archives of Soviet 
documents is that they talked in privatethewaytheytalked 
in public. They actually addressed each other as "comrade.” 
At the top of the page they would actual ly say, "Workers of 
the world unite!" The same sloganeering we discounted 
really was the way they talked to a certain extent. They 
talked about us as imperialists, not just telling that to the 
Third World. They meant it. It is not surprising, although 
disturbing, that in the many now-declassified National 
Intelligence Estimates which werewritten in an attemptto 
understand the Soviet Union, it was very rare for analysts 
tobe tasked by policymakerstowritea memoasifthey were 
Soviet intelligence officers writing to their bosses about 
what the U nited States was doi ng and why it was doi ng it. 
They did not want todothat. It is difficult, and noone wants 
to do it— certainly no analyst wants to do it on his or her 
own. 

As a result, actors tend to think that their signals get 
through. They sometimes worry they will be discounted as 
deceptive, or their objectives rejected as being false, but 
they usually think that at least on the first level the other 
side understands what it istheyaretryingtosay. Often this 
simply is not true. The British ambassador totheOttoman 
Empire, in one of the perennial crises of the late 19th and 
early 20th centuries, attempted to give the Ottomans an 
ultimatum. To show them he was serious and would do no 
more bargaining, he got in his sailboat and sailed out into 
the Bosporus in plain view of Turkish spies, and was 
confident that this would be noticed. They did notice it, but 
their reaction was that he could not be serious— the 
ambassador was off sailing again, and nothing serious 
would happen. 

Another examplefrom one of theVietnamese-American 
conferences. President Lyndon J ohnson launched a peace 
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offensive in December 1965, with a bombing pause over 
North Vietnam, dispatching emissaries to over 100 
countries, and soon.J ohnson probably was serious, he was 
looking for a way out now, this was not just for public 
relations. But the North Vietnamese totally discounted it, 
and, in fact, they thought if he were serious, hewould not do 
it this way— he would not send out so many emissaries, he 
would not be so public, so demonstrative. They did not know 
J ohnson; this was how he always behaved, he believed in 
overdoing things. The Vietnamese thought that maybe 
there was a time the Americans would talk peace, but this 
clearly was not it. On the other side, theNorth Vietnamese 
had a four-point peace program, one point of which was 
quite ambiguous (regarding the role of the National 
L i berati on F orces). T hey thought we compl etel y understood 
what they weretryi ng to say, and it was discussed i n several 
secret meetings attheendof which theVietnamesethought 
we understood clearly. We may have discounted some of it 
as deception, but we did not understand what they were 
trying to say at all. This happens a great deal. 

Let me talk about some implications and some 
conclusions. First, this is a problem not only between but 
within governments. As anyone who has been in 
Washington knows, the only thing worse than negotiating 
with the enemy is negotiating with thefol ks in the building 
across the street. This reflects not only different interests, 
but people have different tasks and see the world very 
differently. In the Kennedy Administration, in trying to 
determine policy toward Vietnam, a team of State 
Department and Department of Defense experts was sent 
out into the field. When they came back to the National 
Security Council (NSC) with wildly different reports, 
Kennedy supposedly leaned back in his seat and asked if 
they had visited the same country. Of course they had not, 
they had visited their own minds— they were simply 
closed-minded the way we all are. They had certain beliefs 
and views, and they were goi ng to i nterpret what they saw 
in that light. 
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Second, attempts at deception work best, and I suspect 
will only work, if you aretrying to convince the other side of 
what they already believe. You haveto plan todo what they 
do not expect you to do; you cannot change their minds. 
Deception can only work well when you have a lot of 
information. Remember the Ultra decrypts and the Double 
Cross system in World War II, which worked brilliantly 
together, but only because the Allies were reading Hitler's 
mail. 

Third, there are lots of cases where the other side will 
read messages you have not sent. For example, at one 
meeting between Scowcroft, Schultz, and Gorbachev, 
Gorbachev was getting really upset, and the Americans 
could not figure out why he was so irritated. When they 
asked hi m what was wrong, he sai d that a Reagan speech of 
theweek beforehad been really troublesome. Scowcroft and 
Scultzhad no idea what speech he was referring to, but after 
the meeting they found out Reagan had given a speech to 
some small Republican group, and the public had not really 
paid attention. It was written by a fundraiser, and it served 
its purpose. But Gorbachev read it, and no one had expected 
that. 

Fourth, different countries havedifferent histories, and 
this is important because of the tendency to draw historical 
analogies based on historical experiences. States often do 
not understand how important that is tothe other side. The 
North Vietnamese have indicated, and I think this is 
probably true, that they were very influenced by Geneva 
1954, where they felt they were betrayed not only by the 
Americans but by their friends. By way of historical 
analogy, therefore, they vowed they would not repeat a 
whole series of errors they associated with Geneva '54. 
Almost no one in the Kennedy and J ohnson Adminis- 
trations knew what Geneva 1954 was, let alone that it 
perhaps might influence the Vietnamese later. 
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Finally, what is most self-evident to you is apt to be the 
most troublesome, because you assume it is self-evident to 
the other side and it rarely is. 

My conclusions are implicit in what I have already said. 
First, Rashomon is the rule, not the exception. You have to 
plan on it, you cannot always defeat it. You have to act on 
the assumption that it is difficult to get your message 
through, and that many of the inferences you make about 
the other side are quite wrong and are different from those 
theother side holds. Second, people rarely understand this, 
partly because it is harder to act when you try to deal with 
this. Third, and related to that, actors often think their 
messages have been received and understood when they 
have not been. Therefore, when theother side does not react 
as expected, you assume the message has been rejected. 
This may be true, but often the message simply has not 
gotten through. Fourth, actors tend to think that others 
understand the i mages they have of others and the i mages 
they are drawing from the other side's behaviors, and that 
often is not true. And finally, in the face of all this, people 
still have to act, and there is a difficult balance to be 
maintained between being open to new information and 
realizing a degree of ambiguity, confusion, and 
deception— and setting a strong course in the world. 

A final anecdote on this. Richard Neustadt's book 
Presidential Power (1960) points out the importance of how 
the President gets his information. Dean Acheson came up 
to Neustadt and told him, 'You're always trying to tel I the 
President that he should get all this information that 
conflicts with each other; my job is to make sure the 
President makes up his mind and does something.” It is a 
real tension between coming to grips with the difficulties I 
have laid out and setting a course in the world. 

But if I were to advocate a prescription, I do think that 
without slighting the need for acting in the face of 
uncertainty, that most important decisions in business and 
government should not be made without competing papers 
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explaining what information is likely to be conveyed by this 
decision totheother side and how the other side is likely to 
vi ew what we are doi ng, what its i nter pretati ons wi 1 1 be. I n 
other words, without extremely strong efforts to put oneself 
in the other side's shoes, to exercise some empathy. I think 
there are very few decisions that are taken on that basis. 
Doing so might not be easy or solveall the problems, but it 
mi ght be a step i n the r i ght di recti on . 

Discussion. 

Dr. J ervis was asked to comment on several issues: 
American signals regarding democratization; signalingand 
perception in the Information Age; and simplicity and 
subtlety in signaling. 

American Signals Regarding Democratization. 

We can be sure that the message of democratization is 
received differently in different countries that have 
different histories, mindsets, and ideologies. It probably is 
taken well in someareas by newly democratizing countries, 
the message being that we think those efforts are 
important. It also might be taken by them as a sign of 
hypocrisy if wearenot puttingour money whereour mouth 
is, particularly if they look at our foreign aid budget. It 
would be interesting to find out what these countries 
actual lythi nk about the message of democrati zati on i n I i ght 
of other U .S. policies. I n other countries it is certainly taken 
as a sense of American hubris— "they're trying to force us 
into their mold"— that we think we have discovered the 
latest panacea, because it is a little suspicious that during 
the Cold War, although we did as much for democracy as 
any country, the record is not great. Kennedy faced three 
possibilities in the Dominican Republic, one that it would 
become a democracy, two a totalitarian state, and three a 
communist state; until we could guarantee the elimination 
of thethird option, wewould havetosettlefor thesecond. So 
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the message of democrati zati on probably does not convey al I 
that we would like it to. 

Signaling and Perception in the Information Age. 

The discussions during this conference about the 
explosion of information and information overload suggest 
that we need to spend more time thinking about 
institutional and personal screening mechanisms. One of 
the psychological screening mechanisms would be to 
become more theory-driven, maybe not in terms of formal 
theor i es but i n terms of bel i efs and expectati ons. 1 1 may wel I 
be that the greater volume of information leads to an 
increased role for what peopl e bel i eve in the first place. 

Second, therearemany moresources of information out 
there now. The rol eof private messengers through h i story i s 
very interesting. There were priests involved in private 
diplomacy between the United States and J apan in 1941, 
and although they did not exactly bring on the American 
entry into the war, they muddied the diplomatic waters. 
There are a I ot of exampl es where pr i vate actors tryi ng to do 
good by bringing together two countries often end up doing a 
great deal of harm. Today there are many more 
opportunities for private diplomacy, with more access to 
information. 

Thi rd i s the probl em of knowi ng the other si de's deci si on 
cycle and timing. One reason the United States was so 
surprised in Vietnam was that we were interpreting 
messages and intercepts found in South Vietnam as if they 
reflected very recent decisions made in Hanoi. But with all 
the problems of command and control on Hanoi's side, there 
was actually a multi-month lag time, so what we were 
pi cki ng up often refl ected deci si ons made 6 months pri or . So 
sometimes you see the other side reacting to you when it 
really has not, because it has not had time to get your 
response or message and digest it. Information overload 
may make the problem worse, though not necessarily. And 
when you're working in real-time, the press will be on your 
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back, it i s hard to keep a secret, and it i s hard to get theti me 
you needtothink before replying. You all know how regular 
mail goes out at the end of the day, offering you an 
opportunity to take something back on further reflection- 
e-mail doesn't allow you to do this. E-mail should have a 
built-in 15-minute delay so you can call it back. 

Simplicity and Subtlety in Signaling. 

1 1 may i ndeed be true that it hel ps to have a reputati on 
for having difficulty responding quickly, rather than having 
a reputation for being ready and able with clear lines of 
command and control. A response should be thoughtful. In 
negotiations deadlines are useful, but there are situations 
whereti me is more important and needs to be si owed down. 
Regarding subtlety, when you look at the historical record, 
it is evident that when people have tried subtle messages, 
very few of them have gotten through. On the other hand, 
some nonverbal signals do get picked up by trained 
di plomats. Also, when you do not get a response, you cannot 
assume your message has been heard and rejected. The 
difficulty often in bargaining is that you want to send 
something subtle because you do not want to appear weak, 
so you are caught in that trap. But I think the chances of 
subtlesignalsgettingthrough are not great. If you do not get 
a response, do not assume anything, and do what you canto 
make things clear. 
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SESSION 5: 

THE INFORMATION REVOLUTION 
AND THREATS TO SECURITY 

The aim of this session was to assess how some of the 
threats to U.S. national security might be exacerbated by 
various aspects of the Information Revolution, looking 
specifically at asymmetrical warfare, cyber -threats, and 
different kinds of viruses. 

“Metaphors and Modern War: 
Biological, Computer, and Cognitive Viruses” 

Edmund M. Glabus 
Aegis Research Corporation 

My plan is to be controversial and creative in thinking 
about asymmetric warfare. What I am proposing is not a 
doctrine, not an operational concept, but more of an 
i nnovati ve but tentati ve i dea, usi ng a metaphor to tease out 
questi ons for further i nqui ry. Thefi rst thing peopl ethi nk of 
when considering war is tanks coming over the hi II, but this 
is not the first thing to think of in information warfare. An 
effective way to think about other things is to use a 
metaphor which conveys quickly what you are trying to 
communicate. The metaphor I will be using is that of the 
virus. 

Let me begin with some of the common definitions of a 
virus: (1) archaic: venom; (2a): the causative agent of an 
infectious disease; (2b): any of a large group of infectious 
agents; (2c): a disease caused by a virus; (3): something that 
poisons the mind or soul. Now a layman's definition of a 
virus would be any agent that takes external copying 
equipment and uses it to make copies of itself. There are 
three types of viruses I would like to talk about: 
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• Biological: any of a large group of submicroscopic 
i nfective agents . . . that cause various important diseases 
in man, animals, or plants [Webster's]. 

• Computer: a computer program that can infect other 
computer programs by modifying them to include a 
(possibly evolved) copy of itself [Cohen]. 

• Cognitive: an agent that infects people with a meme, 
a unit of information in a mind whose existence influences 
events such that more copies of itself get created in other 
minds [Dawkins/Brodie]. 

The virus metaphor is a heuristic, sort of a cheat sheet, 
and is no substitute for good scholarly research— but in a 
soundbite world, you need to attract attention and 
communicate quickly. Table 2 illustrates the three virus 
domains and the similarity of terms used within them. 



Biological 


Computer 


Cognitive 


Gene 


Machine instruction 


Meme 


Cell 


Computer (paper) 


Mind 


DAN 


Machine language 


Representation 


Virus 


Computer virus 


Cognitive virus 
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All software 
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Electronic messages 


Broadcast/ 
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Operating system 


Cultural 
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Culture 
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Program 


Behavior 


Genetic evolution 


Artificial life 


Cultural evolution 


Genetic 


"Back door"/ 


"Hot button" or 


susceptibility 


security hole 


psychological door 



Table 2. The Three Virus Domains. 



A quick noteon memetic viruses. Therehavebeen seven 
articles in the last 180 days with "memetic” in the title. 
These viruses are inherently good at replicating them- 
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sel ves, from decept i on campai gns to u r ban I egends that wi 1 1 
not die, especially on the Internet. 

Let me turn to a discussion of viruses in asymmetrical 
warfare. Of course the goal of asymmetry is that the 
adversary force wants to avoid U.S. strengths and exploit 
U.S. weaknesses. This is possible through the use of 
different virus domains. 

First, biological viruses such as anthrax are quite 
powerful. I raq declared that it had 2,245 gal Ions of anthrax, 
enough to kill billions of people. To put that in perspective, 
the average swimming pool has 25,000 gallons of water in 
it— lots more than the relatively small amount of anthrax, 
when only a smal I amount of it i s needed to be fatal . 1 1 i s very 
hard tofind anthrax even in the production phase; it is easy 
to evade intelligence. In asymmetric warfare the enemy 
may try to step aside of U.S. strengths— to avoid our 
best-trained military fighters— by using a virus. We are 
much better trai ned i n other thi ngs than weare i n bi ol ogi cal 
warfighting. A biological attack can hinder U.S. reliance on 
speed and agi I ity i n combat, and exploit America's perceived 
unwillingness to suffer many casualties. A powerful 
technique of virus use is a second strike against emergency 
responders, whi ch makes it difficult to mobi I ize, assess, and 
respond to the first incident; the second one makes possible 
significant death and disruption. 

Second, opponents may use computer viruses in 
asymmetric warfare. How does the virus metaphor apply to 
information warfare? The virus allows one to leapfrog 
across geography— it is easier to inject a computer virus 
across oceans than other kinds of viruses. The enemy's use 
of such a virus may negate the moral high ground for the 
United States that we claim with non-lethal warfare. Both 
F ranceand Russia sound positiveabout non-lethal warfare. 
The user of viruses is able to claim some moral ground in 
certain forums by arguingthat it is non-lethal. It is difficult 
to coordinate responses to information warfare attacks, 
especially from viruses, and this may allow an enemy to 
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exploit the U.S. reliance on information superiority and 
just-in-time logistics. 

Third, an enemy may also use cognitive (memetic) 
viruses. The use of memetic viruses offsets the physical use 
of force, moving off the high-tech battlefield and into the 
human realm. It also flies under the radar of U.S. warning 
systems, although the United States is rejuvenating its 
efforts to deal with propaganda and to coordinate responses 
toit. Memetic viruses inject ambiguity and complexity into 
conflict, and complicate American policymakers' efforts to 
achieve political consensus. 

So should viruses be considered a sort of unconventional 
weapon of mass destruction? M aybesofor anthrax, because 
it can cause such widespread destruction. The answer for 
computer viruses is no. Although they may produce mass 
di sr u pti on, they aretemporary events that can be mi ti gated 
once we learn how to combat individual viruses. On the 
cognitive side, viruses are perhaps weapons of mass 
deception but not destruction. 

Let me conclude by pointing out some common strains 
and issuesamongthesethree virus domains. All three types 
can be used by states, groups, or individuals, from both 
internal and external sources, and remote delivery means 
are available. All require heavy civil involvement— from 
local and state to the federal level— and raise jurisdi cti onal 
questions. Most defensive assets for all three are in the 
Reserve and National Guard. The viruses are cheap to 
develop and produce, and can become antidote-resistant. It 
is difficult to train for combating viruses, and hard to 
conduct combat assessment. And in general, Americans find 
the use of al I three to be repugnant. 

The virus metaphor is powerful, and it is relevant to all 
different facets of warfare. It is important to have creative 
thinking in all these areas, and I hope that the virus 
metaphor moves us in that direction. 
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'Terrorism as an Asymmetrical Threat" 

Dr. Stephen Sloan 
University of Oklahoma 

It is important to begin by emphasizing ambiguity. The 
problem isthat it is difficult in warfare to determine cl early 
who the enemy is, where the battlefield is, and what 
strategy is needed to achieve what goals. Many years ago, 
Admiral Watkins aptly said that warfare would take place 
in an ambiguous environment. This has special relevanceto 
thechanging roles and missionsofthemilitary. An articlein 
Foreign Affairs several years ago was titled 'The U.S. 
Military as International Social Worker," and we see 
iterations of military operations other than war (MOOTW), 
and so on. 

Clearly, the end of the Cold War broke the outward 
coherence of the international system; there was a balance 
of nuclear terror, and deterrence worked, although with the 
Cuban missile crisis it was a closething.TheendoftheCold 
War released forces that were always there— ethnic, 
national , etc. T oday, beyond the arbitrary di mensions of the 
nation-state are forces geared to using violence in different 
forms. There are changes in the international system, 
including an expansion of the technological universe and 
what Lucian Pye referred to as "diffusion of world culture." 
There are incredible transnational movements, the Pepsi 
generation, the Internet. Visit Nepal, and you will see 
sacred cows wal ki ng the street i n front of I nternet stores. 

The response to the technological universe has been a 
reassertion of primordial loyalties, and although we are 
seeing perhaps a withering away of those loyalties, wealso 
see self-determination alive and well. There is a reassertion 
of community not just overseas but also in the United 
States, people identifying themselves with their own core 
and periphery. 
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The United States now certainly feels the difficulty of 
addressing asymmetric warfare. It is the classic question of 
martial arts, converting the strength of one's opponent into 
weakness. The United States has liabilities of national 
power. And this is still within an environment of 
ambiguity— there is no longer an agreed-upon definition of 
what constitutes national security. It usedtobetraditional 
military forces and issues, but now it includes environ- 
mental challenges and a wide variety of other things. It is 
clearly difficult to identify what is a national security 
interest in this changing security environment. 

Terrorism is, of course, nothing new in terms of the 
information revolution. In my earlier studies I have 
emphasized the role of technology and nonterritorial 
terrori sm— not confi ned to parti cul ar areas. B ut I ong before 
Internet, there were two profound revolutions changing 
terror. First, the impact of jet aircraft— they became global 
targets of opportunity, and threw out the window any 
conceptualization of terrorism as insurgency. You could 
deal with insurgency, but not when the conflict took place 
far away from the disputed territory. Second, the i impact of 
communication— the 1972 Munich incident was the 
breakpoint, although Aum Shinrikyo crossed the Rubicon 
into mass terrorism more recently. Beforethel nternet, the 
CNN drome provided the public with images but not context. 
Recall from Vietnam the images of a man shooting a Viet 
Cong sympathizer; now we see images of an American 
soldier dragged through the streets of Mogadishu. Things 
are not in context any longer. 

This ties in with perception issues as addressed by Dr. 
J ervis. We are now dealing with virtual insurgency and 
virtual terrorism. The military talks about force 
multipliers, but psychologically one can create threats or 
magnify them, leaving an increasing impact on the 
population. These situations have legs— the rumor that 
TWA F I ight 800 was downed by a missi le was spread after 
Pierre Salinger pulled the rumor off the I nternet. 
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Thesituation is complicated by several issues. In regard 
to the impact of information warfare, a serious 
organizational debate will continue— organizational 
doctrine is near and dear to the military heart because that 
is where the money goes. The classic works on the 
infrastructure of terrorism suggested a centrifugal model, 
where the leader was not the center of the organization. 
This enabled thegroup to bond and carry out actions quickly 
without depending on a larger organization. This was alsoa 
disadvantage, however, because the compartmentalizati on 
required by security concerns kept them from engaging in 
concerted campaigns— they needed command and control. 
But through the impact of the Internet and tactics like 
"netwar" (see J ohn Arquilla and David Ronfeldt), these 
groups can now use measures short of traditional war, 
attacking with network forms attuned to the information 
age. Disparate, small groups are now able to network their 
groups and activities. 

The problem we experience technologically is the fact 
that we rely on ladder hierarchies which are not well -suited 
for deal i ng with centrifugal organizations now that they can 
coordinate their actions across the Internet. But 
increasingly we are seeing not just Internet use, but 
free-floating terrorist cells of two or three people, totally 
independent of society. They float within environments of 
anger and hatred, but are free, and they are a profound 
future threat. There were tremendous security efforts for 
the Atlanta Olympics, but one lone terrorist— a "bubba 
cell"— pulled off an attack. These cells are difficult to 
penetrate. 

The greater danger, though, is the cell transitioning to 
netwar, because our response i s sti 1 1 hierarch i cal . The "I ead 
agency” approach sti 1 1 puts State or the F B I i n charge, but 
increasingly we face seamless terrorism where one cannot 
differentiate between overseas and domestic groups. New 
roles and missions are being created beyond the military. 
The FBI is going overseas, and its assets are increasing 
globally. The military is also deeply involved in counter- 
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terrorism regarding weapons of mass destruction (WMD), 
although always emphasizing it as a part of homeland 
defense. 

Serious issues about civil-military relations are being 
tested. We need to get the National Guard more involved; 
there will be new requirements for domestic intelligence 
collection. Related questions of civil liberties, clipper chips, 
and concerns about the National Security Agency will arise. 

I am particularly concerned with the bureaucratic 
responses tothese issues. Despitean apparent appreciation 
of the words, in national preparedness we are seeing a 
bureaucratic cockfight, and we are throwing money down 
the tubes. 

Ultimately, we face a major problem, but not just on 
WMD. The fact is with a biological attack we are dealing 
with crisis management— sorting out the bodies. The key 
issue is preemption and how we engage in it. We can no 
longer afford to be reactive, we need to have information 
cells to do offensive and defensive information warfare. No 
matter how good the Federal Emergency Management 
Agency and the National Guard are, we will only be doing 
triage after an attack comes. 

So let me suggest four things we need to do: demystify, 
deglamorize, delegitimize, and deter asymmetric warfare. 
We have not done well so far. We can seethe bodies, but we 
never deal with thecontext in which a tragedy takes place. 
Sun Tzu was correct that we live in "infested times." 

'The Cyberterrorist Threat" 

Lieutenant Colonel (Select) Gregory J . Rattray 
U.S. Air Force 

While working on my Ph.D., I have spent the past 18 
months working in the Pentagon on information warfare 
(part of the 5 years I have been involved in infowar), and I 
see it as a huge challenge. Organizational responsibilities 
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flow from how you define the threat, and we face a problem 
of broad defi niti ons and descr i pti ons of i nfowar . B ut despite 
national-level attention we do not have structured 
responses. As an aside, I wonder why, if asymmetries are 
such a threat, we have not seen more cyber -terror ism 
happening. We have not suffered much yet from digital 
disruption. We have been saying this is a problem, but 
nobody has used it to come after us. 

So who are we talking about? Cyber-terrorists are 
non-state actors with an objective— not states, not 
individuals or criminals. They are not engaged in public 
diplomacy, or cyber-espionage, or the use of web sites to 
release information. Boundary setting efforts are difficult. 
Many things we do would be appropriate to deal with all 
levels of threat. 

What is cyber-terrorism? It is the destruction or 
disruption of information and systems. The idea of mass 
disruption in particular is getting lots of play in public. It 
might be possible to cause train wrecks with underlying 
switching technology, but one would need lots of data. 
Crashing the stock market is the classic case of what you 
would do to disrupt the United States, and we do see stock 
markets disrupted by information problems. It would be 
difficult for us to recover from would-be data corruption of 
stock market databases, such as the disruption of clearing 
and settl ement of trades, whi ch wou I d rai sequesti ons about 
every trade and create long-term complications. There are 
also some gray areas like attacks on the media, disrupting 
CNN, and attacking computer portals; these kinds of 
attacks highlight the capability of the terrorists. What 
means are used depend on the objectives of the group. 

There are several possible motives for cyber -terrorists. 

• political coercion— These terrorists want careful 
orchestration of actions, and do not wish to alienate the 
public; 
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• religion/millennial/anarchists— Disruption isthegoal. 
Terrorist groups may be networked with the goal of a 
long-term jihad against West, having no specific political 
goals but also not intended to be a short-term effort; they 
may plan for long-term disruption and perhaps eventheuse 
of extreme WMD; and, 

• hackers— Hackers themselves could be co-opted by 
groups trying to do any of these; however, there are 
operati onal secu rity probl ems with usi ng hackers, and some 
difficulty of orchestration with hackers actually willing to 
commit violence. 

Therealsois a range of means availablefor committing 
cyber-terrorism. These may include digital attacks like 
malicious code; denial of service through information 
overload (we see this most right now); targeted 
intrusion— hackers breaking in, mostly exploratory so far; 
corrupted code— theY2K remediation effort has created an 
enormous opportunity to create new code insertions into 
U.S. software, and a lot of the code is from India, Israel, and 
China; and radio-frequency weapons— things likejammers 
to disrupt transmi ssion of data wi 1 1 become more i mportant 
as Internet goes infrared and wireless. However, I would 
question thetraditional wisdom on whether terrorists have 
the tools, expertise, and access needed to conduct these 
attacks. Web tools are like hand grenades rather than 
bullets— they cause problems in networks but cannot be 
targeted that wel I . They are not atomic bombs, either— they 
are not that powerful. The bullet would need a concerted 
effort and strongtools, and require moreexpertisethan they 
are likely to obtain easily. However, insiders makeit much 
easier for them to get the access and expertise they need. 

The assumption is that cyber -terrorists are most likely 
to target our critical infrastructure, and most energy and 
money are spent on critical infrastructure protection. 
Luckily what sprung from the Oklahoma City and Tokyo 
i nci dents were some new mi ti gati ve efforts that al so I ooked 
at cyber threats. We have been focused on critical physical 
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nodes without looking out for internal interconnections, 
such as tinning and synching computers; these are not a 
major part of our efforts now. Terrorists are also likely to go 
after high visibility organizations like corporations, the 
media, or DOD; attacks against web pages are clearly 
coming from groups that want to get their name out, get 
notoriety for their actions. We also need to watch out for 
hoaxes, and there credibility is the key. Until this year, 
when we got more real viruses, we had lots of virus hoaxes 
and spent a lot of time and energy on them. We are doing a 
better job at recognizing the problem, and PDD-63, the plan 
for national critical infrastructure protection, callsfor a web 
of organizati ons and i nfor mati on shari ng centers to address 
various types of threats. 

One other note on the possibilities of cyber-terrorism. 
T er ror i sts may run two types of campai gns: si ngl e i nci dents 
with a dramatic impact, forcing us to focus on planning; or 
protracted guerrilla campaigns which are more difficult to 
deal with, allowing hit-and-run tactics and posing a 
significant long-term threat. The policy and investment 
responses to these types of campaigns may differ signifi- 
cantly. 

Sowhat have we actually seen of cyber-terrorism? There 
has been plenty of theoretical stuff, but we have not seen 
much evidence. I nfor mati on systems have been a target for 
centuries. Cavalry units cut telegraph wires during the 
Civil War; and there is a long history of infrastructure 
attacks by Luddites, the IRA, and others. We have seen 
cases of hackers as ter ror i sts, usi ng the den i al of servi ce as a 
political act, but terrorists as hackers have not been 
demonstrated to be a threat. An example of hackers as 
terrorists may be the Zapatistas; related special groups 
announced and launched an attack on DoD web sites; the 
military's response actually forced a crash of the attackers' 
computers. 

There are challenges for us in defending against these 
attacks, and there are challenges for cyber-terrorists. Our 
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challenges include systems and infrastructures, where we 
need to get producers to build better systems; tactical 
warning and attack, which means we need better sensors 
and network maps; and the fact that response requires 
cooperation and coordination, which are difficult in 
practice. 

Challenges for cyber-terrorists include problems of 
developing expertise— the culture of existing groups is not 
technol ogi cal ly adaptive or adoptive; there are I i mits to the 
use of hackers for hire; targeting is more than hacking; and 
mass disruption may engender resistance in infrastruc- 
tures and publics over time. 

Let me conclude with a couple of observations. We need 
to avoid hype and try to understand the underlying forces 
which are making cyber -terror ism a threat. The means to 
counter it are available, but employing them is tough. The 
U ni ted States i s bei ng proacti ve but we need todo more, and 
that includes making some difficult policy choices— there is 
no silver bullet, so we must discern the risks to guide our 
efforts. 



Comments 

“An Electronic Pearl Harbor? Not Likely." 
David Isenberg 

Arms Control Implementation Division 
Dyn Meridian 

I have some prepared remarks that I would liketoshare, 
and then some specific comments about the presentations 
we have just heard. 

Let me begin by summarizing the conventional wisdom, 
to wit: Some day soon, society as we know it is going to 
collapse. Why? Because our computer networks will be 
attacked by hostile states or terrorist groups, and, as a 
result, the nation's critical infrastructure will go down. The 
power grids, telephone lines, air traffic control, and 
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financial networks will collapse; panic will engulf the 
nation, anarchy will reign inthestreets, and life will be one 
continuous Y2K scenario. Life, as we know it, will cease to 
exist. 

It does not take much effort to see warnings of this. One 
cannot go a day without reading accounts of the perilous 
cyber-threats confronting the nation. Consider some of the 
recent headlines: 'Telecom Links Provide Cyber-Attack 
Route,” 1 "Pakistani HackersTap Lackland,” 2 "U .S. Scurries 
to Erect Cyber- Defenses," 3 "Cyberwarfare Breaks The 
Rules of Military Engagement," 4 "In Theory, Reality, U.S. 
Open to Cyber -Attack," 5 and "China Plots Winning Role in 
Cyberspace," 6 to name a few. 

Preparing for an eventual cyber attack has been a 
growing threat industry for years now. The Pentagon and 
numerous other cabinet agencies have been setting up 
offices to deal with this latest addition to the pantheon of 
weapons of mass destruction. Think tanks have been 
cranking out thick tomes, 7 academic journals regularly run 
articles on the subject, 8 and the defense industry has been 
holding conferences 9 to solemnly announce the emergence 
of our newest threat. 

There is just one thing wrong. As Gertrude Stein once 
famously said of Oakland, 'Thereis notherethere.”Similar 
to the way the medi a has gone overboard the past coupl e of 
years regarding the prospect of an attack against theU nited 
States with biological weapons, the imminence of 
information warfare attacks has been, in the words of Mark 
Twain, greatly exaggerated. 

In fact, it is nothing short of amazing when you consider 
that there still is nodefinition of "information warfare" that 
is accepted government-wide. Nevertheless we are 
spending billions of dollars a year on various information 
operations. 10 This is not to say, of course, that fears of 
information warfare attacks are totally off base. Certainly, 
we have seen many deliberate disruptions of web sites, 
e-mail servers, and introductions of various viruses over the 
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years. But most of these have been merely garden variety 
bothersome incidents, not the work of a rogue state or 
implacably hostile terrorist group. 

The problem is that we have been so inundated by lazy, 
inaccurate, misleading reporting about the subject— which 
is usually characterized by the phrase "Electronic Pearl 
Harbor," that we take as a given that which has yet to be 
shown a true threat. In fact, the reporting is so bad that 
there are web sites out there devoted to debunking the 
myths that have grown up about the threats posed by 
computer viruses. 11 Of course, these sites are in the 
minority. The vast majority of the sites dealing with the 
issue, like the media at large, hype and exaggerate the 
threat. 12 

Consequently, we may do more i njury to ourselves than 
any enemy has done, by simply overreacting. Many press 
stories are recycled versions of ones that circulated 
previously, and were wrong in thefirst place. For example, 
there was an article in September 1999 about howthell.S. 
Government is growing increasingly worried that foreign 
infiltrators are building secret trap doors into government 
and corporate networks with the help of foreign-born 
programmers doing Y2K-related work. 13 Anonymous CIA 
analysts were quoted about being worried over the threat. 
The only problem, according to George Smith, editor of the 
Crypt Newsletter, 14 is that the same story was first 
circulated back in the late 1980s and has been periodically 
recycled since. 15 

Another cl assi c myth whi ch keeps bei ng brought back to 
life and has assumed the status of the Holy Grail is the Gulf 
War Virus. For example, in November 1998 the Center for 
Strategic and International Studies (CSIS) released a 
report on the danger of hackers and terror from the I nternet 
entitled "Cybercrime, Cyberterrorism, Cyberwarfare: 
Averting an Electronic Waterloo." The CSIS study passed 
on a number of myths, including: 
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The United States has readied a powerful arsenal of 
cyber -weapons . . . planting logic bombs in foreign computer 
networks to paralyze a would-be opponent's air defense 
system. . . . 

While interesting reading, it isyet another in a long line 
of appearances by the equivalent of the Internet's Piltdown 
Man: theGulf War virus hoax. This was originally an April 
Fool's story in which the National Security Agency (NSA) 
was claimed to have developed a computer virus to attack 
I raq's air defense computers during theGulf War; the way 
in which theCSI S report presents this myth indicates it was 
taken from sources known to be contaminated by it. 16 

To paraphrase Pogo, we have met the enemy and it is 
mostly our media. The overwhelming tenor of the coverage 
has always been toward accentuation of the sensational 
parts of it. So when peopledo"intelligenceanalysis'' on this 
and gototheir Lexis-Nexus database, they find hundreds of 
cites of the same scare stories and minor variations on them 
going back over the decade. The bad analysis comes when 
this is used as "proof" that an "electronic Pearl Harbor” can 
be implemented by any teenager or group of malcontents 
with Net connections. 

In fact, most, if not all, of these articles have a dreadful 
sameness about them. Again and again the same media 
organizations recycle the same quotes and cliches, 
uncomprehendi ng or i ndifferent tothefact that they are not 
actually producing anything that is real news. Other 
characteristics of "electronic Pearl Harbor” stories are: 

1. Obsession with hypotheses upon what might happen, 
not what has happened. 

2. Rafts of generally insignificant computer security 
incidents accumulated as anecdotal evidence and delivered 
in an out-of-context or exaggerated manner, insinuating 
that something awful is about to happen— today, tomorrow, 
a year from now, always in the not easily glimpsed future. 
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3. Abuse of anonymous sourcing and slavish devotion to 
secrecy. Emergency Planning Handbook (EPH) stories 
usually contain a number of "anonymous” sources— from 
the Pentagon, the White House, Congressional staff, 
computer security firms, intelligence agencies, think tanks 
or unspecified consulting firms. Frequently the anonymous 
will allude to even more secret and terrible things which 
cannot be mentioned in print ortheRepublicwill crumble. 

4. Paranoid gossip, the equivalent of which is offered up 
as still further proof the nation is in electronic danger. 
Russia, China, France, India, Israel— almost any country — 
can be portrayed as taking electronic aim at the American 
way of life. Programmers of foreign descent are tarred as 
potential cyber-saboteurs in a kind of modern techno- 
McCarthyism. Teenagers are transformed into electronic 
bogeymen with more power at their fingertips than the 
Strategic Command. The allegations tend to bedel ivered by 
anonymous sources or "experts” not required to provide 
substantive examples. I am not convinced at all that being 
an expert on terrorism makes anyone an expert in the 
virtual world, so one goal might be to keep the talks focused 
on what is real, rather than what might be real. By 
attempting to restrict any discussion to reality— not media 
reality— you can put them on the defensive. 

Keep in mind there have been no examples of terrorism 
inthevirtual world with any measurable impact at all inthe 
real world. Computer viruses, for example, are not viewed 
as the work of terrorists by anyone in computer security. 
While we know viruses exist and a certain amount of money 
is spent each year in attempts to control them, there are no 
metrics that exist to measure or even quantify their effects 
or numbers with any precision. Even theanti-virus industry 
does not have any accounting standard that provides such 
information outside of raw numbers of actual individual 
viruses created, which in itself is a completely meaningless 
figure with regard to the real world. Theempirical evidence 
that exists shows only that computer viruses never 
constitute much more than "annoyances" in networked 
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computing. Conversely, you cannot use that information to 
infer that they could mean anything special in the hands of 
potential terrorists. 

Let me quote from J ames Dunnigan, a military affairs 
writer: 

What gets lost in all the fanfare and desperation over 
information war is that most of the damage to information 
systems is, and always has been, caused by human error. The 
flubsareeither bytheusers, or by the programmers, hardware 
designers, and the 'integrators' (who put the hardware and 
software together). Often it is impossible to tell if a system 
failure is a result of some bad programming or sloppy chip 
design or the consequence of someone's information war 
attack .... Information war makesgood copy— nothinglikea 
frightening lead story to spice up a slow news day. But 
information war is nothing more than the same old use of 
deception against an enemy that has been with us since the 
first recorded battle, 3,200 years ago. 17 

I n short, there i s no smoki ng gu n that proves any cl ai ms 
the administration or the Pentagon has made about the 
potential for information warfare against the nation. But 
there is a substantial body of empirical evidence which 
suggests the welfare of the United States is not as tightly 
cou pi ed to networked computers as thef utu r i sts suggest, or, 
rather, that computer security problems, while real, are 
part of the noise of a technological society that everyone 
works through on a day-to-day basis. 

For example, consider the Melissa virus. There was no 
impact on the stock market, no impact on the economy. And 
so it has been with computer viruses in general. Although 
they are often bandied about as part of the info-war Pearl 
H arbor scenari o, there are no convi nci ng studi es that show 
computer viruses, despite widespread existence on 
corporate, government, and military computers over the 
entire decade, have much of an impact on anything. More 
likely, you can factor them in with the types of human 
errors, accidental erasure of files, and network accidents 
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caused by incompetent administration that everyone 
struggles with. 

So how do we go from an unquantifiable grit in the 
economic machine to a software bomb that brings down 
everything? No one has a compelling answer for that other 
than science fiction scenarios and what-ifs, which are a 
dime-a-dozen. It is I ike saying the common cold virus could 
mutate into something that causes cancer next year. No one 
wouldtakethecold virus scenario seriously, but many seem 
to bel i eve the software possi bi I ity. 

Where were the cyber-warriors during the conflict over 
Kosovo? There was no impact, other than a minor media one 
when alleged Yugo-hackers (who could also have been 
American teenagers) tried to mess with NATO's web page. 
There was no impact, other than a media reaction, to 
"Chinese hackers” messing with the U.S. Information 
Agency (USIA) web page, or whomever they messed 
with— and again we could be talking about American 
teenagers. 

Anyway, there are no studies that explain how the 
defacing of web sites equates to a potential for looting the 
electronic treasury and turning off the water or power. The 
only thing that can be said is that it appears that web site 
break-ins are common. But this cannot be explained by 
simply detecting more such attempts. In many cases, it is 
merely a reflection of better monitoring and awareness— 
that is, the Pentagon is seeing what, in all likelihood, was 
always there. And there is some self-fulfillment, too— the 
more it gets into the mainstream press, the more net idiots 
are inspired to get a piece of the action. This is a well-known 
hacker phenomenon. 

There are precious little detailed technical descriptions 
that demonstrate how an electronic Pearl Harbor would be 
attempted. You simply cannot find any. You can find a lot of 
technical description of security holes in software and 
hardware. But this is not the same thing. Because you can 
overwrite the stack of various pieces of Internet software 
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with mal icious commands does not equate toturni ng off the 
power on the eastern seaboard. It only equates to gaining 
some access on one vulnerable machine. Does that machine 
control everything of value in the United States? Probably 
not. H owever , there i s a I ot of nebu I ous descr i pt i on, wh i ch i n 
reality can be done by anyone with a 15-mi nuteeducati on on 
the topic. 

The hyperbole surrounding the vulnerability of our 
information systems has degraded useful education on the 
topic and created an environment where it is actually 
harder to get practical work done. There has also been an 
explosion in snake-oil salesmen seeki ng to I inetheir pockets 
by catering to the fears of the not so well-informed. It 
mirrors what has happened with Y2K. Every major 
statement by an administration or Pentagon official on this 
subject is a I ways foil owed by press releases on the business 
and PR newswires issued by fly-by-night consulting and 
computer security firms trying to coat-tail on the publicity. 
As a result, it has become very difficult for someone not 
highly trained in the area of computer security to 
differentiate the con men from the legitimate. Yet, this is 
what management in government and corporate America 
must do everyday. One might conclude that the hysterical 
tone the government uses has actually harmed national 
security by opening a portal through which con men, idiots, 
and the simply greedy gain access to systems they might 
normally get nowhere near. 

Furthermore, there are a number of very good reasons 
why the national security preoccupation with an electronic 
doomsday has actually been a hindrance to the 
establishment of good computer security measures. First, it 
creates the impression computer security is an endeavor 
designed to protect from catastrophic events that come in 
one lump. Nothing could be further from the truth. 
Computer security is a day-to-day affair. Information 
technology professionals in a working environment have to 
deal with aspects of it as a daily part of their jobs. The 
constant implication that security is only of interest as it 
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relatestotheoretical catastrophes interferes with education 
on it. Good computer security practices come from the 
grass-roots up. Fundamental education on basic 
issues— even as simple as being able to get trusted 
anti-virus software or password management— is more 
important than the creation of yet more super agencies and 
analysts to mull over or handle the threat. Put even more 
bluntly, computer security is everybody's business. It does 
not do well in secret or in a hierarchical world. 

Second, the overemphasis on theoretical threats has 
resulted in a true rube's approach to the subject. Anybody 
can come up with the suggestion to create a new agency, a 
"cyber-corps," an "electronic FEMA," an arm of the 
military— to be a central coordinator for computer defense, 
but this completely ignores how successful computer 
security practices evolve. For example, the anti-virus 
industry is a model of distributed computer security. It is a 
true global network. There is no central overseer of 
anti-virus effort. To be sure, the industry is aggressive and 
often conducts business in a predatory manner, but in spite 
of itself it must be distributive in nature. There simply is no 
other way to combat computer viruses. No one can do it all. 
Nocentral location could possibly muster enough resources 
and react fast enough to emerging infections. 

Another example of the necessarily distributive nature 
of net policing is the Internet reaction to spam. The 
emergence of spam as a growing nuisance really does get to 
the heart of computer security issues. Simply, spammers 
make unauthorized use of the computing resources of 
others. In response to this, an informal international group 
of administrators who hate spam emerged to construct 
protocols and procedures for dealing with the worst 
offenders. Again, this is a distributed process— not a 
centralized, pyramidal, bureaucratic effort. The Internet 
itself, in other words, tends to work against those 
attempting to damage it. This also has very important 
implications for those contemplating the use of it as a 
platform for information warfare operations. 
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The continued entertainment of the idea that another 
safeguard of theinfrastructureisjust another super agency 
away is unwise and misinformed. The Department of 
Defense (DoD) has a serious brain drain in computer 
security workers, partly because of this approach. Many 
communication security workers started working for DoD 
but lit out for greener pastures because (1) DoD simply will 
not pay them what they are worth in the private sector, and 
(2) they are stuck in a hierarchical, centralized scheme in 
which they have to consult with many distant superiors to 
perform basic functions necessary to computer security. So 
they quit andgowheretheycan dowhatthey havetodoand 
get paid twice as much for it. 

Moreover, the emphasis on central defense against 
theoretical threats thoroughly obscures the fact that there 
is not much pressure anywhere to develop commercial use 
software that is robust from a computer security viewpoint. 
The focus on fixing "external" threats is a symptomatic 
approach— it does not get at the real roots of the 
disease— which is that software and hardware have 
heretofore been developed in an environment that views 
secure computing as an afterthought, not a necessity. To 
change that takes education at a basic level. For example, 
computer scientists and programmers should be more 
thoroughly schooled early with regard to taking security 
i ntoaccount when devel opi ng software i n future busi nesses. 

To summarize, does this mean that there is no threat to 
computer networks? No. It just means that we have met the 
enemy, and it is our own lackadaisical computing habits and 
incompetent reporting that threaten us. 

Now let me turn briefly to comments on one of the 
previous speakers. Mr. Glabus is correct that there is no 
doctrine for viral warfare, but there is no doctrine for many 
possible threats like bioterrorism and nonlethal threats. 
Metaphors are often greatly exaggerated or distorted 
because we have few actual examples from the past; we 
should not give much credence to them. Biological viruses 
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have a psychological impact, producing a visceral, terrified 
response. But, like computer viruses, they have perhaps 
been bal I yhooed excessively. Israel has dealt for years with 
the threat of terrorism, but people do not overreact to 
possible attacks because it is a part of life, more so than 
here. People eventually will have to get smarter about 
passwords and computer protection, but that does not mean 
that hacker attacks will never succeed. 

Discussion. 

Discussion at the end of this session focused on three 
topics: the possible legitimization of terrorist attacks, 
particularly because of the ill-defined yet strategic natureof 
terrorism and information warfare; asymmetric warfare 
and the ability of the American public to filter out media 
bias; and the problems of hoaxes and incorrect framing in 
understanding "virtual terrorism." 

Terrorism and Asymmetric Warfare. 

Dr. Sloan:Therereally is noagreement on thenatureof 
terrorism. The Vice President's report on terrorism pointed 
out the difference between an act of war and a criminal act, 
but terrorism can be clothed in legitimacy by calling it war. 
Asymmetric warfare is a concern. Despite the global 
military power of the United States, given our shaky pre- 
paredness and thefor ce drawdown, there are new questions 
about our ability to engage in the regional contingencies 
which are still out there. Conventional war is still a reality, 
and though asymmetric warfare will be important in the 
future, we may be focusing too much on it. 

Asymmetric Warfare and Media Bias. 

Mr. Glabus: If one looks at recent coverage in the San 
J ose Mercury about hacker operations, it was a relatively 
sincere effort, and it went back and apologized later for 
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somemisreporting. Both spin doctors and the media haveto 
go back and fix their reporting later if possible. 

Dr. Isenberg: There is a bifurcation in society between 
those whofol low the mainstream press and those whofol low 
alternative outlets or sources. People foil owing mainstream 
news in the future will not "get it.” 

Virtual Terrorism, Hoaxes, and Framing. 

Dr. Sloan: Of course the government is trying to bring 
order out of chaos, and often focuses on the threat du jour. 
FollowingtheOklahoma City bombing, people immediately 
blamed Middle Eastern terrorists because it was easier to 
demonize a foreign enemy. One of the issues in information 
warfare is that the American portrayal of what terrorists 
look like is inaccurate and unhelpful. Incorrect framing of 
terrorism gets in the way of meaningful analysis. Those 
frames take on their own legs, and the dynamics are that 
you do not get down to the truth. Consider the sound of 
silenceabout Pan Am 103— wedonot blame thereal culprit 
of that attack, Libya. 
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SESSION 6: 

RESPONDING TO SECURITY THREATS 



Thegoal of this session was to consider the U.S. response 
to threats to the national information infrastructure, and 
how those responses might be enhanced. 

"From Incident Data to Intelligence Analysis" 

J on Ramsey 

CERT Coordination Center 

lnl988theMorrisWorm, devel oped at C a r n egi e- M el I on 
University, attacked the Internet. The Defense Advanced 
Research Projects Agency (DARPA) responded 
immediately, and out of that incident was born the 
Computer Emergency Response Team (CERT). We now 
provide 24-hour technical assistance to Internet sites, 
assess their vulnerabilities, issue advisories, and offer 
guidance on flaws in information technology. 

CERT operates on a number of princi pies. First, wetryto 
provide valued services. The "response" in our title implies 
that we are reactive, but we are also proactive. We educate 
vendors on what they should and should not do, work with 
security administrators, and do evaluations for a variety of 
constituents. Second, we ensure the confidentiality and 
impartiality of our services. Wedonot i dentify the victi ms of 
cyber-attacks, but can pass information on anonymously to 
warn others. We are also an unbiased source of trusted 
information. Third, we coordinate with other organizations 
and experts in the community, government, and private 
sector. We utilize a distributed model for I ncident Response 
Teams, emphasizing coordination and cooperation, not 
control. The CERT Coordinating Center helps these other 
teams coordinate their analysis— we provide intelligence 
that only aggregate information can produce. 
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Our constituency really includes everyone on the 
Internet. As of J anuary 1999, there were 43 million host 
computers around the world, including a diverse set of 
users: academic and research institutions, government, 
corporate users, and home systems. Anyone can turn to us 
for assistance. 

Regardi ng the col I ecti on of data for i ntel I i gence anal ysi s, 
we cal I our collection the Haystack. We collect the data for 
operations but not for analysis— how long did it take to 
recover, what cost, what preventions? What are the risks, 
mitigation strategies? We are working on an automated 
process to handle the reports of 45-60 incidents we receive 
each day. The data i s stored i n e-mai I messages and status 
files, but there is a problem with solving syntax and 
semantics problems in those reports and messages. 
Additionally, whereas in 1988 CERT handled six incidents, 
in 1999 the number of incidents exceeded 9,000. So the 
overall Haystack includes 22,940 incidents, 251,000 
e-mails, and 17,000 hotline calls. 

Processing Data to Produce Information. 

Our information is derived directly from the data and 
from other open sources. We use these to find trends, to 
discover classifications and categorizations of incidents, 
and to create advisories and reports on intruder tools. We 
also use nontraditional information such as political and 
social events. For example, we have found that virus and 
worm attacks seem to correspond to mid-semester breaks 
for col I ege students, and ou r advi sor i es seem to i ncrease the 
number of reports rather than reduce them. 

One of the thi ngs we have done with the data i s to create 
a root cause taxonomy of the vulnerabilities we have 
discovered. The taxonomy shows which root causes to go 
after (such as buffer stack overflows, and configuration and 
authentication problems). We have also created a 
Di stri buted-Systems I nt ruder Tool s Report whi ch analyzes 
the newest sets of intruder tools being used. The report is 



108 




available online at: http/ / :www. cert.org/ reports/ 
dsit_workshop.pdf. 

The next step for CERT is to turn information into 
intelligence products. We hope to do this using a 
multi-disciplinary approach. This includes, for example, 
trying to understand an intruder's motive through thehelp 
of criminology, psychology, and sociology. We are also using 
some recent advances in technology such as data mining 
and automated learning and discovery to assist in the 
analysis process. In fact, the mission of the CERT Analysis 
Center is to use a multi-disciplinary approach to the 
creation of intelligence based on computer security 
incidents, vulnerabilities, and related information. 

Let me conclude by reemphasizing our main goal, which 
is to use intelligence to protect our national information 
resources by capitalizing on data collected at the Center 
over the last decade. 

"A Computer Crime Overview: 

National Infrastructure Issues” 

Dan Larkin 

Supervisory Special Agent 
Federal Bureau of Investigation 
National Infrastructure Protection Center 

I am a realist, and am somewhat skeptical about the 
probl em of computer cri me. There i s a probl em, but I am not 
sureitisan international threat. Most cases we have seen in 
the FBI are domestic, although there are some ongoing 
international elements. 

How do computer crime issues at the federal level 
translate down to the local level? There is significant 
computer-related crime in the Pittsburgh area. This region 
has 450 softwarefirms and 800 high-tech companies, and a 
number of these facilities have been targeted by criminals. 
What we are trying to do is focus on the real threats, 
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reachi ng out totheexperts i n the mi I itary and i n i ndustry to 
locate those threats, and there are some new efforts at least 
at the local level to find an approach to the problem. 

The Internet and increasing inter connectivity have led 
to vulnerability because of the need for speed and more 
information. What has happened is that we have had lots of 
juvenile Internet hackers, and the reality of the threat is 
vulnerability. I started working with CERT 5 years ago as 
part of the first national computer crime squad in 
Washington, DC. One hacker got into the National Oceanic 
and Atmospheric Administration (NOAA) satellite system, 
andtheFBI started working with CERT; now there is a full- 
time agent from the FBI at CERT. We are making more and 
more efforts to get business on board to work with us, 
confidentially, to inform industry about information that 
might be targeted. 

The fact is that hackers are mostly juveniles, and they 
really fear prosecution. There are other criminal types 
involved, however— hackers, insiders, national, or 
international industrial -commercial spies. TheFBI has had 
some success against economic espionage. For example, a 
celebrity came for treatment at the University of Pittsburgh 
Medical Center, and the hospital tried to protect her 
identity; a hospital employee hacked in to steal her medical 
records tosel I them to a magazi ne. Thi s event actual ly I ed to 
federal legislation to protect computer records. At 
Pittsburgh Paint and Glass, people were caught trying to 
peddle company secrets, and two were prosecuted. 

The Internet provides criminals with a number of 
advantages: it makes it easy to locate victims; it creates an 
environment where victims do not have to see or speak to 
the criminals; it is a persuasive vehicle for fraud; thereare 
only mi ni mal costs to sett i ng up a web page; and technology 
has exploded exponentially in the recent past. As a result, 
we have seen several particular types of Internet crime 
come to predominate: financial crimes such as money 
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I aunderi ng and on-l i negambl i ng, terror i sm, extorti on, chi I d 
pornography, and a wide variety of frauds. 

Let me conclude by highlighting several of the 
government's responses to these problems. First, 
Presidential Decision Directive 63 (PDD-63) created the 
President's Commission on Critical Infrastructure 
Protection, the goal of which being to network on the key 
issues and vulnerabilities in our critical infrastructure. 
Second, there is a new Internet Fraud Center coming 
on-line soon in West Virginia. Third, the whole Y2K crisis 
has been useful in forcing us to look more carefully at our 
vulnerabilities, and we are getting more feedback on 
vulnerabilities from industry than before. Finally, we are 
instituting a program called InfraGard, in which we go 
inside industry to work together on vulnerabilities, and boil 
that information down to disseminate to others (while 
retaining confidentiality). So far local industry has been 
quite responsive. 



'YSaps in Response” 

Frederick G. Tompkins 
Information Security Principal 
UNISYS Corporation 

What we are concerned about in the business sector is 
thatthegovernment community (primarily intel I igenceand 
law enforcement) is primarily looking at postulated or 
perceived threats. Our concern is that postulated/perceived 
is on the opposite end of the spectrum from where we are 
looking, which is what is real and what is probable. 

Last February Dick Clark of the National Security 
Council (NSC) came to a financial industry session to 
discuss private sector samples of attack signatures. He 
indicated that the government had a database of 100s of 
attack signatures, and would make them available to 
industry with no conditions and no charge, with no 
expectation of return information. We were working on a 
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vulnerability assessment methodology for the financial 
services infrastructure, and told the government we wanted 
a threat and indicator briefing, and that the database 
needed to be made available right away. However, soon the 
govern ment tol d us that we needed cl earances toget i nto the 
threat briefings, si nee they were not open after all. We did 
get a secret level briefing, and what we heard was based on 
secret i nfor mati on sou rces that we were not al I owed to know 
about, and so on. So we are skepti cal , to say the I east. When 
we aretol d that i nfor mati on wi 1 1 be made avai I abl eto us, we 
usually do not get it. 

Let me put this issue in context. What is reality for the 
commercial sector? Our problem is now, not just down the 
road. 

• Commercial off-the-shelf technology. The 

problem we face is that we no longer custom-design 
software, so that every unique problem we face must be 
dealt with using generic software. We cannot influence the 
design and development of the products we must purchase. 

I n terms of risk, this increases the degree of uncertainty. 
N ow we are changi ng i nternal busi ness processes to empl oy 
software that was made by someone else; technology is the 
driver, not the servant, and this is a dangerous trend. A 
major Y2K risk concern is that 85 percent of the remediation 
code being written is from India. 

• Rate of technology change. The half-life of 
technol ogy i s now 5 months. Thi s shortens i nternal i ndustry 
planning timeframes from years to months, even down to 
days/hours. The strategic planning time frame used to be 
3-5 years, now it is 8-10 months; tactical planning was 1-3 
years, now it is 30 days; operational planning was 1 month 
to 1 year, today i t i s 48-96 hou rs. We si mpl y have to move on 
to the next problem if we cannot fix the first one. 

• Risk acceptability. How do we manage the 
synergistic effects of risk across the infrastructures? 
Typical government responses are all about sandboxes and 
turf; people are talking about threats and vulnerabilities, 
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but not risks, which is what wedeal with. The arithmetic of 
the Cold War was easy; we could quantify the threat by 
counting. But we cannot do that now; we cannot do 
quantitative risk management. It is not possible to 
eliminate all vulnerabilities; the best we can do is pursue 
risk avoidance. For example, there is a trade-off with 
multi-programmed operating systems, which are actually 
serial, not simultaneous. Data is transferred between 
programs during wait times— control can be taken away 
from outside thanks to a flaw in how these operating 
systems are designed; the only solution is single-task 
operations, which are no longer feasible in the business 
environment. There is a trade-off between security and 
speed/flexi bility. 

• Speed of business. Little academic work is being 
done in this area. J ust-in-time logistics in business is 
everywhere. At the Chrysler plant in South America, parts 
arrive just two hours ahead of when they are needed. 
Wal-Mart has no stockroom; each store instead has a 
satel I itedish which enables ittoorder resupply as needed. 

National and International Security. 

Let me make several observations on national security. 
Essentially, a different model of national security is needed. 
Former Deputy Secretary of Defense J ohn Hamre has said 
that what is at stake is security "pre-Eisenhower," which 
means economic security. This was recognized in the 
President's Commission on Critical Infrastructure 
Protection (PCCI P) report, which stated that "our national 
defense, economic prosperity, and quality of life have long 
depended on the essential services that underpin our 
society." The commercial sector actually owns the 
infrastructure, and we control it within certain risk levels; 
the commercial sector wants to enrich its stock-holders, not 
arrest criminals. It needs a competitive edge to stay ahead 
in the marketplace where the product cycle is now 18 
months. 
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The interim Hart-Rudman report (September 1999) 
emphasized the economic security impacts of technology 
vulnerability. It concluded that "the national security of all 
advanced states will be increasingly affected by vulnera- 
bilities of the evolving global economic infrastructure” and 
that "global forces, especially economic ones, will continue 
to batter the concepts of national sovereignty." What is at 
stake, then, is not only the nation's security in the 
constitutional context, but also the nations' security 
because of the interdependence of economic relations and 
the international operations of American companies. For 
exampl e, U N I SYS does 60 percent of its busi ness overseas; 
it controls NASDAQ operations, manages over half of all 
check clearances, and is used by most large banks in the 
world. 

In summary, I would suggest several things. First, there 
are still significant cultural differences between industry 
and government which are bigger than paradigms and 
language. We are in a Kuhnian revolution in knowledge, 
and the current paradigm is in crisis; shifts are occurring 
and we do not know they are happening. The scientific 
community is at least 5 years behind in understanding the 
problems. Second, we all have a stake in the nation's 
security. Third, risks must be managed, not avoided. 
Nobody is saying how to do it, but compliance is not the 
answer. Fourth, our predilection for thecountermeasure du 
jour must be overcome. Finally, what we are witnessing is 
notan information revolution, buta relationship revolution, 
with profound implications for how we do business. 

Comments 

Mac Fiddner 
University of Pittsburgh 

My challenge is to try to bring these presentations into 
perspective on the theme of the conference, but in the 
interest of time my comments will be brief. Responses are 
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the most difficult aspect of the problem, not just the 
technological complexities, but alsothetypes of information 
being transmitted (public, private, and classified) and 
problems of sources, all while maintaining confidentiality 
and integrity. I would conclude that at the moment the 
government does not have a real policy in regards to 
i nf or mat i on secu r i ty . T h ere i s per ha ps a de facto pol i cy f r om 
the President's Commission on Critical Infrastructure 
Protection, but it is not a well -articulated policy. 

Discussion. 

Discussion revolved around the idea of 
cyber-mercenaries and the confidentiality of information 
provided by busi nesstothe govern ment.TheFBI has seen a 
relatively small number of cases of hackers for hire, and of 
the three most recent cases, two had significant 
international elements. The FBI's response has been to 
improve networking within the intelligence community to 
create early awareness, including broadening its network of 
intelligence to include groups like CERT. CERT does not 
investigate the origin of a threat; rather it reacts to the 
event itself. M r. Ramsey bel ieves that the majority of such 
incidents are international, raising important legal and 
jurisdictional questions. 

I ndustry is concerned that the government may misuse 
corporate proprietary information (e.g., turning it over to 
the Securities and Exchange Commission), with no 
guarantee from the government that the information is 
going to be held confidential, particularly in response to 
Freedom of Information Act (FOIA) requests from business 
competitors. The FBI's position is that while business does 
not get satisfaction everytime, thelevel of security from the 
FBI is appropriate, and business is protected from FOIA. 
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NOON SESSION: 

Vi deo Tel econference 

Thissession built on the previous session on responsesto 
security threats. 

‘Towards a National Information Security 

Strategy" 

Dr.J ohn Arquilla 

Naval Postgraduate School of Monterey 

and 

David Ronfeldt 
RAND Corporation 

Let me begin with a definition of information strategy. It 
is the pursuit of policy through informational ends and 
means, and it includes several components. First, 
supporting existing political, economic, and military 
domains of statecraft, and emergence as a distinct new 
domain itself. We want to conceptualize information as a 
distinct dimension of American power. Second, managing 
our own capabilities and resources, and interacting with 
others in peacetime, crisis, and war. It is at least as 
important that we learn how to manage our own resources 
as it is that we determine how to attack the enemy. Third, 
attending to both the contents and conduits— both the 
structuring and the processi ng— of information. It applies 
tothe message as well as the medium. Andfinally, realizing 
that "information strategy" corresponds, at the highest 
level, to "knowledge strategy.” What does one know about 
the battle for Seattle? Black helicopters and 135 nation- 
states were upended by nongovernmental actors. 

As the information revolution alters the world, we see 
some crosscutting trends. First, the information revolution 
is resulting in a vast new technological infrastructure. We 
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have global access and inter connectivity, and the United 
States is the primary beneficiary of this, but as we become 
more dependent on it we also become more vulnerable. 
Second, the power of networked non-state actors is 
increasing. In civil society we are seeing nongovernmental 
organizations (NGOs) and activists, but we also see the 
emergence of "uncivil" society, such as criminals and 
terrorists. Third, the information revolution is enhancing 
the effects of "soft power" and "information operations," 
gi vi ng peopl e greater abi I i ty to i nf I uence events. Th i s i s tr ue 
of the Zapatistas in Mexico, of radio station B92 in Serbia, 
andSuu Kyi in Burma, for example. For states, this can also 
have some positive effects, perhaps allowing us to act at 
lower cost and with less risk, and perhaps also to target our 
actions better. We use economic sanctions quite frequently 
but with many unintended consequences. Information 
operations might allow us to pursue our aims without 
hurting a lot of people. Fourth, states are being altered in 
some ways, and perhaps diminished, but they will have to 
learn how to deal with these new actors. 

David Ronfeldt and I are trying to articulate a four-part 
vision of where we should go with U.S. strategy. First, there 
is an emerging set of strategic opportunities and 
imperatives. 

• On the defensive side, we need to maintain "guarded 
openness." Our economic and political security depend on 
open relations with our allies, but we have to be guarded 
because almost all information technology is dual-use in 
nature. 

• Integrate a "sensory apparatus" to warn and monitor. 
In other words, we need to learn how to network better, 
something we do not do well in government. 

• Develop the "noosphere" proactively. David and I like 
to coin a new term at least once a year, or else we are not 
doing our job, and this is taken from DesJ ardin's notion of a 
"realmofthemind.'Thissubsumesboth cyberspace and the 
media-driven infosphere, and our corollary is that a new 
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type of politics will emerge alongside it, "noopolitik” rather 
than "real pol iti k." 

• Project the right "story" via soft power. Whose story 
won during coverage of the demonstrations against the 
World Trade Organization in Seattle? Clearly, the demon- 
strators' story prevailed. 

• Use "strategic swarming” to mix hard and soft power. 
Swarming is a kind of tactical or doctrinal approach that 
allows one to strike from all directions simultaneously, 
whether it is social activism in downtown Seattle or the 
Zapatistas in southern Mexico. An interesting example of 
this was General Shelton's actions in Haiti a few years ago, 
wherea small number of Special Forces were able to spread 
out and maintain control of the island during a period of 
i ntense coercive di pi omacy. 

Second, there is some concern or sensitivity over the role 
of the United States in information sharing versus 
information domination. Even our allies are worried about 
intelligence cooper at ion with us because they are afraid of 
some kind of exploitation. And ifyou listen tothelranian or 
Vietnamese media's depiction of world opinion, they 
perceive that we are seeking domination over the world 
through cultural exports I ike reruns of Baywatch, although 
I do think some of this is tongue-in-cheek. 

National Information Strategy. 

How do we move toward formulating a national 
information pol icy and strategy? We have to rethink how we 
are applying "information" in the current political, 
economi c, and mi I itary domai ns of our grand strategy. Then 
we need to i denti fy the bu i I di ng bl ocks and measu res for the 
development of a new information domain of granted 
strategy. This idea first appears in President Reagan's 
National Security Strategy in 1981, suggesting the notion of 
information asafourth dimension of national power. Atthe 
sameti me, we havetothi nk about how this problem appl i es 
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to the offense-defense dilemma and its implications for 
deterrence and coercion, as well as what it means for 
alliances and conflict resolution. 

Current grand strategy is already replete with 
i nfor mat i on-dr i ven el ements. O n the pol i ti cal I evel , ou r goal 
of democratic enlargement is greatly aided by interconnec- 
tivity because it puts such pressure on authoritarian 
regi mes. B ut there are pi aces where we need to appl y some 
prudence because we do not want to see change come too 
quickly. We do not want it in Saudi Arabia yet, and who 
wants democracy in Algeria if the radicals take over? 

In the economic domain, information creates a 
tremendous new profitability for the United States; the 
expansion and growth we have seen in the 1990s is the 
product of the i nfor mati on revol uti on. B ut we are I ooki ng at 
technology that is all dual-use, having both commercial and 
military applications, so we may inadvertently be 
endangering our information security and empowering our 
rivals. Oneof thegreat problems in our relations with China 
has to do with the ballistic missile and other technologies 
that they are acqui ri ng. 

On the mi I i tary si de, it i s a fasci nati ng ti me. 1 1 i s difficult 
to find another period in time where one power had such 
predominance in military power over all others. What the 
information revolution is allowing us to do, in terms of 
information operations and the information used in our 
weapons systems to improve their accuracy, is to use 
extremel y I i mi ted and di scr i mi nateforce. B ut there i s al so a 
danger of information arms races, and the possible spread of 
weapons of mass destruction (WMD), if the U.S. edge in 
information technology is not shared. Opponents may feel 
the need to offset our capabilities with dirty, old-fashioned 
WMD. Recent Russian military exercises called ZAPAD 
[WEST] 99 featured extensive use of tactical nuclear 
weapons. 
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A Framework for the National Information 
Strategy. 

Ifwewantto con cept u a I i ze a f r a mewor k f or i n f or mat i on 
strategy as a distinct domain, we need to think not only 
about offense and defense, but also about a more general 
posture. We need to think about the ideational tenets and 
organizational and technological principles, but the real 
defining level is that of ideational concepts. (See Table 3 
below.) 

We have a policy choice to make: are we going to focus 
narrowly or broadly? If narrowly, then our focus will be on 
cyberspace security and safety. This includes infrastructure 
protection and assurance, intrusion detection and 
rapid-response strategic information warfare, and 
public- private intelligence coordination. This is where we 
are right now. If our focus is broad, then we need to place 
additional emphasis on global "soft power.” We would 
pursuethis notion of "noopolitik," which is an international 
system based on ethics, norms, and values. It is really a 
revolution in diplomatic affairs, and the next step beyond 
constructivism. Such a strategy at a broad level would 
includethe right of communications and informat ion for all, 
and the deep coordination of government and NGOs. For 
example, why were none of the NGOs invited to the World 
Trade Organization meeting in Seattle? In either case, we 
need to pursue guarded openness, strategic swarming, 
organizational networking, and infrastructure expansion. 

At the organizational design level, we recommend 
interagency networks and some new organizational 
structures, as well as better public-private cooperation. 
Half of all military communications traffic goes across 
commercial systems, so we need to learn how to cooperate 
better. 

On the level of technological applications, we 
recommend wide diffusion of strong encryption technology 
because the bad guys already have it, so we might as well 
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use it. As to defensive measures, we need better depth 
defense— there is a kind of Magi not Line mentality about 
information security with firewalls or orange book systems 
that (supposedly) nobody can break into. However, every 
day we find new evidence that this is not true. What we 
neai is depth defensethat may allow the bad guys in, but all 
of our information is protected by strong encryption solittle 
damage is done. Regardi ng offensi vecapabi I ities, weare not 
talking just about taking down somebody's power grid, we 
need to be considering how to use our great media howitzers 
to get the story across that will win. 

David and I would recommend that we fill in the 
framework broadly as follows: 



General Posture 


Defensive Measures 


Offensive 

Capabilities 


1 deational Tenets 


Development of 
noosphere, 
noopolitik, plus a 
RDA* 


Guarded openness, 
no first use of SI W** 


Discriminate 

swarming 


Organizational 

Design 


1 nteragency 
networks, hybrids 
with hierarchies 


Public-private 
cooperati on for 
information security 


Coalition 

information-sharing 
and interoperability 


Technological 

Applications 


Wide diffusion of 
strong encryption; 
connectivity 


Preclusive and depth 
defense architectures 


SI W** measures; 
media broadcast 
capabilities 


*RDA =Revolution in Diplomatic Affairs 
**SIW = Strategic information Warfare 



Table 3. The Ideational Tenets and Associated 
Principles. 

Across the ideational level, as I suggested earlier we 
need to explore the noosphere, this realm of ethics and 
ideas. Defensively, we need not only guarded openness, but 
the United States might find some benefits in a no-first-use 
statement regardi ng strategic i nformati on warfare (SI W) i n 
order to reassure other countries. Offensively, we believe 
swarming will be the best doctrine. 
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Finally, we should consider some new and varied issues 
on the agenda. First, those that are defense-related: 

• Defending the homeland against "cybotage.” 

• Elaborating behavior- based arms control. We are 
talking about behavior because we simply cannot control 
the technol ogy any more with SI W. 

• Operating in coalitions, projecting forces. These 
problems are immense. Disruption of our deployment 
schedul es or ai r taski ng orders could cause us a great deal of 
trouble. 

• Coping with non -state actors, both civil and uncivil. 

• Shaping a strategic information doctrine(SI Dj.This is 
a change from the Single Integrated Operational Plan 
(SIOP). 

Second are those that are community- and country- 
related: 

• Constructing a globe-girdling noosphere, a global civil 
society that allows us to resolve many of our disputes with 
more peaceful means. 

• Fostering a revolution in diplomatic affairs (RDA). 
This means building a diplomatic system that is not based 
on embassy edifices and putting the President on the front 
I i ne of every di pi omati c cr i si s. 

• Developing a capacity for strategic swarming. 

• Pressuring authoritarian rulers. The information 
revolution gives us quite a bit of leverage in places like 
Cuba. 

• Settling high-risk conflicts such as Kosovo. Peace will 
comethere not through a negotiated military settlement but 
through an agreement on some common future. 

What we need for an information strategy then is a 
concept of operations for the 21st century. Lord Nelson, for 
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example, suggested new naval tactics that allowed his ships 
to concentrate on smaller parts of the enemy's navy and 
achieve a stri ki ng advantage. At Trafalgar and a number of 
other battles, he did just this. In the German concept of 
blitzkrieg, the tank, airplane, and advanced communica- 
tions were conjoined to enable maneuver warfare. We need 
to get to this point in our thinking. 

At present, there are more questions than answers. 
What issues get priority or provide us with the best 
leverage? Dothe issues and theframeworkrelatewel I? How 
much can reorganization alone accomplish? At least, 
shifting the current direction of our thinking seems 
advisable. The prevailing concept of operations has 
emphasized thetechnical anddefensivedimensions, keying 
on U.S. vulnerabilities. The focus of the next concept of 
operations should be on ideational and organizational 
dimensions, and on opportunities to be proactive. This 
requi res a great strategi c shift i n thi nki ng that we hope wi 1 1 
be evidenced in the next Presidential Decision Directive 
(PDD) on the subject. 

Toexplain where we are today, let mereturn toTable3. 
We are already implementing most of the defensive 
measures recommended (except the no-first-use 
statement), and we are utilizing most of the technological 
applications except for the diffusion of strong encryption. 
What is not getting done is thinking about the general 
posture, including the need for new, hybrid hierarchies. On 
the offensive side we are not doing well at figuring out how 
to share information with our most trusted allies. We are 
also not really considering offensive doctrine; we are stuck 
with the doctrine of Curtis LeMay, which was something 
along the lines of "nuke them into glass.” What we would 
introduce is something a bit more discriminate, with 
strategic swarming allowing us to place our efforts where 
we need them. 
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Discussion. 



Dr. Arquilla was asked to comment on four issues: the 
place of physical violence in this approach; the empower- 
ment of nongovernmental organizations; information 
warfare attacks against the economy; and the outlook for 
success in devising a national information strategy given 
bureaucratic realities. 

Violence and Strategic Information Warfare. 

Violence does not go away. At the military level, the 
concepts that David and I have elaborated about cyberwar 
and netwar suggest that you can achieve your aims with a 
lot less destruction than you used to. Wethinkyou can avoid 
having to use annihilation or destruction to win, and that 
you can win with disruption. Violence is a key toterror and 
always will be, and my great fear is not that the cyber -terror 
threat will become real— though it is now a lot I ess than it is 
given credit for in official circles. My fear is that terrorists 
are learning how to become "informatized," and they are 
usi ng i nfor mati on now openly avai I abl e to gui de and target 
their violent operations. Recently I was able to go on-line 
from my desktop computer and take virtual tours of U.S. 
military bases; I briefed thistosomebasecommanders, and 
partly as a result that information is now off the Web. I see 
the terrorists using information in a variety of ways, most 
importantly as a tool for supporting their active combat 
operations because there is a lot of information out there. 
Secondly, I think terrorists are going to be increasingly 
using the Internet for fundraising. TheTamil Tigers have 
showed an ability to reach out to a large diaspora for 
material support. Those kinds of uses are what I am more 
afraid of than cyber -terror itself. Today the notion of using 
bits and bytes to bring whole systems down is very much 
exaggerated. 
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Empowerment of Nongovernmental Organizations. 

Clearly in thecaseofthe landmine issue, the Net was not 
the only resource out there. There was a lot of media 
coverage, and there was a I ot of use of cl assi c acti vi st tacti cs. 
Aerial bombardment began with zeppel ins dropping bombs 
on English pubs, and it took another 25 years for air power to 
come to fruition as the defining force of 20th century 
conflict. In much the same way, I think the information 
revolution is now just getting on its legs in terms of civil 
acti vi sm. T he case of the Zapati stas i s i nteresti ng. 1 1 i s cl ear 
that the Mexican government was influenced to end its 
military activities against them in part as a response to 
their use of information operations. I n Burma, government 
behavior has been somewhat restricted because of 
Net-based activity. This is still at an early stage, and use of 
the I nternet is not going to be effective every time. We need 
tobecareful nottohypethecapability, much likewehaveto 
be careful not to hype the threat of cyber-terror, either. 

Strategic Information Warfare against the 
E conomy. 

I do not think thethreat exists today, and it is not clear 
when it wi 1 1 . What we saw with the ri se of ai r power was two 
different viewpoints. One was that it would have an 
important effect on the battlefield, and it took about 25 
years for that to happen. The other view of the early 
theorists was that airpower changed everything— you did 
not have to engage the enemy's field army to strike his 
homeland. For 85 years people have been trying to realize 
the potential of an independent striking force. I am afraid 
we are going to have a similar debate over information 
warfare that may last just as long. There are those who 
think we can bring the enemy to his knees simply through 
an information attack on his economic, political, and 
transportation infrastructures. Yet we built infrastructure 
that could withstand nuclear war— that is why we built the 
Internet. I think that information warfare is as doomed as 
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the early, grandiose expectations of airpower. However, I 
think information warfarecan have strategic effects if used 
against militaries. Disruption of American deployments 
could make all the difference, especially if an opponent has 
limited goals and threatens the use of WMD after he has 
achieved his goals and before we can respond. Such fait 
accompli strategies may be enhanced by information 
warfare. I think that I ike airpower, information warfare is 
going to have its main effects on the battlefield and will 
cause homeland disruption, but it will never be able to 
obtain a state's political aimsin atrueClausewitzian sense. 

Strategy vs. Bureaucracy. 

What we have is a dismal landscape of bureaucratic 
pulling and hauling. I see few opportunities to break 
through it. I have been looking at thisissuefor 10years,and 
progress is only made slowly, and here and there. When I 
walk the halls of the Pentagon, the locus of world power, 
everyone I meet seems to think fatalistically that he can 
accomplish or influence nothing. So I think our greatest 
problem is sociological, in persuading people that they can 
make a difference in what they do. There are pockets here 
and therewhere people are trying to make a difference. We 
are beginning to get some interservice coordination, and a 
I i ttl e bi t of i nterdepart mental cooperati on. The chal I enge i n 
the years ahead of us is organizational, not technological. 
U n I ess we begi n to devel op some sen se of I oya I ty t o a n ent i ty 
greater than an individual service, or the State 
Department, or one of the other governmental actors 
involved, we are not going to move ahead. T en years from 
now I do not know if we will yet have a real information 
strategy, although I am sure it will be an improvement on 
what we have now. We have enough of a cushion in the 
international arena right now that perhaps we can continue 
to muddle through for awhile. 
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SESSION 7: 

THE U.S. MILITARY AND INFORMATION 
OPERATIONS 

The aim of this session was to provide an overall 
assessment of the information revolution and its impact on 
the way U.S. military forces conceptualize, organize, and 
train for information warfare. 

"Seizing the High Ground: 

Land Operations and Information Operations" 

Lieutenant Colonel Michael L. Warsocki, U.S. Army 
Land Information Warfare Center 

I magine being a commander in ancient Greek warfare. 
You could not seewhat was happeningvery well, so you had 
toseizethehigh ground. For centuries we havethought that 
we could win the battle if we were able to see better. 
Information has evolved into another dimension of warfare. 
We have now gone to the limits of physical height (space), 
but the new "high ground” is information. 

Information operations (10) is an integrating strategy of 
actions taken to affect an adversary's decision cycle, 
i nf or mat i on , a n d i nf or mat i on systems while defen d i n g on e's 
own information and information systems. Physical 
security, psychological operations, deception, 
intelligence— 10 encompasses all these things. The trick is 
to manage behavior through perception management. We 
want to modify the enemy's perception of the situation and 
change his behavior, to get into his decision cycle and 
influence it. 

The older concept of command and control warfare 
(C2W) is the antecedent to 10. C2W was focused on the last 
two parts of Colonel J ohn Boyd's notion of the OODA loop 
(Observe, Orient, Decide, and Act). We figured that if we 
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could impact the information that the enemy's decision- 
maker was getting, he would make bad decisions or give bad 
orders to execute them. This was seizing the high ground to 
createan advantage. It was not always easy to execute this 
kind of warfare, but it had the advantage of using force or 
kinetic energy, which we had plenty of. That does not work 
when you are in a peacekeeping situation, where force is 
impermissible, and we are doing that more and more. 

Offensive information operations are centered on 
attacking the enemy's most vulnerable points. If we can 
create a situation where the enemy is giving orders and 
counterorders to the point that he is completely confused 
and all we have to do is come onto the battlefield and clean 
up, that is effective information operations. Think of police 
actions. A policeman can be dressed in a variety of ways, 
from M cGruff the cri me dog to ki netic energy-SWAT team 
guys that break down your door. The ultimate means of 
behavior modification is a bullet in the head, and that is 
what the military is good at. But that is not the first choice 
any more. The military hastofigureout how to get into the 
unobservables: the willpower, perceptions, and situational 
awareness of the enemy's decision cycle. 

Defensive information operations occur not just in the 
cyber-world, but on television, and in places likeBosnia and 
Somalia. Bytheway, the poor defenseless Albanians wesaw 
on TV were also running black market operations, and we 
were confused as to what to do with them. They were 
successfully attacking our information systems. 

The goal of information operations is to buy time. When 
chased by a bear you only have to be faster than the guy 
behind you. Strategically, I do not need to win the world, 
just buy time. Get a commander more time by condensing 
his decision cycle or disrupting the opponent's, and he now 
has command of a new di mensi on of warfare. The battl efi el d 
can be peacekeeping or anything, but time is the critical 
piece of the puzzle. 
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Thethreat is anything that counters my plan, whether I 
am a businessmen, politician, soldier, or what have you. I 
have a plan, and defense is strong but offense is decisive. If 
someone has a plan countering mine, that has to be 
disrupted or delayed. An election campaign isan exampleof 
information operations interfering with the other side's 
plan. When I am a peacekeeper, the opponent is anyone who 
opposes my plan; it could bean NGO, an ally, or theenemy, 
and you deal with each differently. 

The threat is also likely to be asynchronous and 
asymmetrical.Thenexttimewegotofight we may not have 
6 months to prepare our logistics, and we may be attacked 
asynchronously to disrupt our debarkation points, our 
bases, our supply and logistics net. There was a joke that 
went around in Bosnia about howtostopa NATO air strike: 
get five Canadians and handcuff them to the target. That's 
asymmetry. You do not need military power if you can get 
into the enemy's decision-making cycle by using the news 
media, and that is getting easier all the time thanks to 
television. In Serbia, Dutch footage of a U.S. helicopter 
going down with no bullets fired (it had clipped a high power 
wi re) forced us to waste a week havi ng to respond to it. 

We are likely to face some changing threats, including 
the actors I would call "mugs, thugs, and wackos," who are 
getting more creative and adaptive. We are going to be 
dealing with social fabri c issues with impli cations for policy, 
such as black markets, multinational areas, and criminal 
elements. For example, the Kosovo Liberation Army (KLA) 
was supposed to be protected by U .S. forces, but we did not 
know what to do with the Albanian black market that 
cropped up. It was not our policy to fight it; the rules of 
engagement were not clear. 

There may be larger threats, as wel I , I i ke the C h i nese. A 
Chinese mi I itary document fromj une of 1999 titled On New 
Warfare outlined new principles of war which must be 
directed against the United States. It suggests the use of all 
means possible, including armed force and nonarmed force, 
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and lays out eight laws for a secure strategy, including 
asymmetric, omni-directional, nontypical, fl exi bl e attacks. 
The Chinese are talking like they are at war, at least a 
reconnaissance war, and we need to do what we can to stop 
the reconnaissance. 

This is not new. As far back as 1959 it was argued that 
the point of war is not to kill the enemy but to make him do 
what you want. What has changed is that information is 
now so ubiquitous that I can reach behind my opponent's 
front line and attack his systems through information 
operations. So how does the Army deal with this? 

Information Operations. 

The planning principles of information operations are 
knowledgeand synchronization. Weneedtoknowthetarget 
audience— at home, in allied countries, or in the opposing 
country. There are a number of principles, but the key is 
synchronization, getting people moving I ike a football team 
where everyone is working together and doing their 
individual jobs. This is easier said than done. 

There are some processes in information operations that 
are worth exploring. We face a variety of crises, campaigns, 
and routine tasks, so we have coordination cells to vet 
problems, to put together a plan and get down tothe level of 
executable tasks. These include a whole series of 
intelligence and civil affairs activities: community 
relations, working with nongovernmental organizations 
(NGOs), giving instruction to local police forces, and 
working with the media. TheG-5 has todothejobof a real 
politician in working with the NGOs, but he has to stress 
that we need their cooperation because we are not just there 
to protect the NGOs. 

What does the I nformation Operations Working Group 
(IOWG) do? It assists the 10 staff officer plan, coordinate, 
and implement the 10 campaign. Sometimes there is a 
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question of who it is working for— the commander, the 
decisionmakers, or itself; it depends on the situation. 

The key is orchestration of all these things. A lot of 
things are happen ingall at once, but they all havetheirown 
rhythms and cycles, and it is difficult to coordinate them. 
There is a lot of friction in this process. You havetogetdown 
to the nitty gritty details, by day and by month— press 
releases, plans, etc. People's perceptions areoften shaped by 
how well you manage the day-to-day implementation 
problems. 

I ntel I i gence su pport i n thi s process i s cruci al . There i s a 
lot of information coming in, and synchronization of it all 
becomes important because the enemy may exploit it if you 
do not. There are lots of data out there, but we have to 
coordinate and share that knowledge. With some new 
databases I ike Oracle we can dump in both structured and 
unstructured data and turn the computer to the task of 
making sense of it. The trick is to take a lot of disparate 
databasesand pull out of that haystack the needles that are 
truly useful. 

One of the tools we are using to do this is called 
Themescape— we take lots of data, put it on the web, and 
bring out the themes. We take the information and useitto 
create connections between concepts or individuals, to 
visualize these in three dimensions, and bring out 
similarities and relationships among databases which may 
reveal to us a center of gravity that we should target. 

How does the Army put all of this together? Until 
recent I y,thiswasnot possi bl e. We h a ve open ed wh at we ca 1 1 
the Information Dominance Center, which is a central 
facility where teams from around the world can connect 
with us and work on coordinating information operations. 
Here we can bring together the entire execution of 10, 
including feedback and putting all the pieces together. 

In conclusion, we need to know what 10 can really do. 
The main goal is seizing the high ground of time, timely 
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information beingso vital. Short-term 10 modifies behavior, 
mid-term 10 changes attitudes, and long-term 10 changes 
deep-seated beliefs. The point is that we need to have 
realistic expectations about what 10 can dofor us. 10 is not a 
silver bullet, but it can bean enormous help in avoiding the 
need to use lots of bullets. 

"New Approaches to I nformation Warfare" 

Lieutenant Colonel Charles Ayala, U.S. Air Force 

I am not going to outline the ways in which theAir Force 
tries to do the kinds of things Colonel Warsocki has just 
described, because there is a lot of commonality with the 
Army approach. I spentayear as a National DefenseFellow 
at the U ni versity of Pittsburgh to encourage out-of-the-box 
thinking about information warfare (IW), and I want to 
share with you some of the ideas I encountered during that 
year that I am bringing back to the Air Force in the hope of 
shaping the debate further. 

The rationale for studying information warfare is that 
information is the key to situational awareness for the 
airman and to the command and control of air power As the 
country comes to rely more and more on airpower, we need 
to be I ooki ng at thi s from a vari ety of angl es. N ow wi thi n the 
Air Force, IW is very fragmented. All kinds of specialties 
haveapieceof it,fromthetraditional computer geeks, tothe 
intelligence people, communications and electronic 
equipment experts, the security folks, education and 
training teams, and public affairs specialists. In the Air 
Force, all the camps are contending for their slice of the 
budget, over what part of I W they can gain control. 

Broadly, what I want to cover includes understanding 
thenatureof I W, pickinga definition of it, and finding some 
alternative approaches to I W. 
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Understanding the Nature of I W. 

I W i s much morethan j ust the i nteresti ng features of the 
I internet. Thereare 165 mi 1 1 i on users on-l i ne, and morethan 
800 million pages on the web. But more than just the 
statistics, the bottom line is that the Internet is about 
money— e-commerce already generates more than $200 
billion a year. IW is also about changing technology. Data 
transfer rates and volume have grown exponentially, while 
the number of soldiers needed to cover an area has shrunk, 
and there are all kinds of new tools available. 

There are a variety of IW definitions outside the 
Department of Defense, and most of these focus on 
asymmetry. The military service definitions are typically 
action oriented. 

Now we do face a significant threat from nation-states, 
but we also face substate threats: first, widespread and 
validated (by the Defense Sciences Board)— incompetents 
and amateurs, hackers, disgruntled employees including 
military personnel, and crooks. Unhappy employees are 
real I y a bi g probl em. The second type of su bstatethreats are 
validated but limited, such as organized crime, foreign 
espionage agents, and enemy proxies. The last type of 
substate threat includes those whose existence is deemed 
likely but has not been validated, such as political 
di ssi dents and ter ror i sts. We have found actors I i ke Osama 
Bin Laden using laptops, but we are not sure what the uses 
are. Agai n, these su bstatethreats are dynami c and movi ng, 
they are not static. When you group all of the threats 
together and consider the probabilities and consequences, 
the vectors are moving increasingly towards both. 

NowlWcan becarriedoutatall levels of understanding. 
As suggested earlier, it is true that the next time we are not 
goi ng to get 6 months to prepare. H owever, we al so have to 
be concerned with others who will give us 10 years— they 
will take a more strategic approach. 
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Choosing a Definition of Information Warfare. 

Existing approaches are oriented toward process or a 
concentric ring model, where we try to create system 
paralysis intheenemy by hitting his centers of gravity all at 
once. The Air Force strategy is operational risk 
management— everything we do in the military is 
inherently dangerous, but we do not stop because it is 
dangerous, rather wetry to managetherisk. This concept of 
risk management has proven successful in flight 
operations, and it is being applied by the Air Force to 
networks and to how we deal with the media. 

I would propose a modified definition of information 
wa rfa r e, wh i ch i s to ta ke "wa r " out of "i nfor mat i on wa rf ar e. " 
Let me explain by breaking it down further. Information is 
defi ned as text that answers the prerogatives of who, when, 
what, and where; knowledge is text that answers the 
questions of how and why. Text i s a sti mu I us for those of us 
who have sight, but we need to modify the traditional 
definition toinclude stimuli of all the senses, not just sight. 
War is stimulating the senses in a violent way. What if we 
could create the reaction we desire while using nonviolent 
stimuli? 

In looking for a better definition of IW, I have come 
across several new approaches that are worthy of mention. 
F i rst, the approach taken by academi cs at K i ng's Col I ege i n 
London (what I call a "Scotland Yard” approach) is based on 
crime. They emphasize understanding the organization, 
capabilities, motive, and objectives of the opponent, then 
taking a matrix and applying a network analysis. This does 
not require a lot of sophistication, but it is a disciplined 
approach involving categorization and linkage that may be 
useful to the military for determining what we want to do 
with IW. 

Second, theBulgarian military's general staff approach 
isOODA loop derived, the goal being to reduce uncertainty. 
Their notion is that information warfare is an oxymoron- 
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there is no war if you are doing the information part 
correctly. This is truly out-of-the-box thinking for the Air 
Force, and it is dicey because it throws responsibility for IW 
down to the level of the individual soldier or airman. 
Ultimately this may push the issue into the civilian sector 
and away from the experts i n vi ol ence management. 

The third approach is the Massachusetts Institute of 
Technology "Oxygen System.” The idea here is that 
information is like oxygen— we all need it, and even after 
beinguseditrecyclesitself.Thisisauseful model becauseof 
its ease of use, transparency, and criticality. 

Finally, the People's Republic of China hascomeupwith 
the notion of setting up a fourth branch of its armed forces to 
do information warfare. This reflects a different viewpoint 
and more fundamental Chinese thought based on Sun Tzu 
and the idea of chi or wisdom— a different way of thinking 
about the whole process. It deals in the realm of 
chaos— creating order out of a disordered situation. 

These new slants on information warfare have serious 
implications for how we organize, train, equip, operate, and 
maintain our forces. Sometimes the Air Force has 
undergone change for the sake of change, but these are 
fundamental changes that we cannot avoid. 

• We will need changes in how we organize, through 
increased teaming. The Air Force tried a Total Quality 
Management (TQM) approach in the Air Combat 
Command, and took the sortie rates of poor teams and 
brought them up dramatically. 

• We will have to train differently, using things like 
collaborative, computer-based training, video teleconfer- 
encing, and distributed learning. We will train soldiers to 
their task, tothe language requi red, totheculturesthey wi 1 1 
need to know. 

• We will equip soldiers in new ways, issuing technology 
to the lowest echelons. We are just starting this process. 
Every cadet at the Air Force Academy now receives a laptop, 
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whereas they used to be given a slide rule or calculator. In 
the future we will give everyone Palm Pilots or similar 
technology, sothat soldiers and airmen will becomefamiliar 
with the technology from the very beginning. 

• How we operate will be changed. We will need to move 
toa more relaxed structure, a so-called "skip echelon" where 
the boss does not mind going around the system. 
Communications will take on special value, and we will 
have to emphasize individual accountability and a 
back-to-basics approach. 

• Finally, we will have to alter how we maintain our 
forces. We are already going to more modular designs which 
can incorporate commercial, off-the-shelf technologies. 
Eventually we will supplement most high-cost upgradable 
equipment with low-cost throwaway equipment. 

Let meconcl udewith threeideas. Thethreat of I W is real 
but distorted. We are usually focused on the systems and 
the medium, and wearenot paying enough attention to the 
content. Alternative tools and models do exist outside of the 
military, and they need to be considered more fully. And 
finally, the potential exists for decreased, instead of more 
efficient, violence. 

Discussion. 

The panel ists were asked to comment on two ideas. First, 
it was suggested that the concept of "chaorder," a mixture of 
chaos and order, is reflected in the blurring of distinctions 
among war, crime, terrorism, social protest, black markets, 
etc. This creates new policy dilemmas, yet the military still 
seems to be training for the old paradigm. Second, it was 
offered that the military operates only where directed by 
ci vi Man authoriti es, yet thoseauthoriti es are moreand more 
removed from the reality of the military. The military may 
have to take a more active role in informing the civilian 
authorities just what it is capable of doing. 
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Training for the Old Paradigm. 

Colonel Warsocki: Training is indeed critical. The 
Command and General Staff College at Fort Leavenworth 
wantstotalk about 10, butthereality isthat this is not what 
we train people to do. Now what they are getting is lots of 
information with some kinetic energy— training people to 
be police and handle situations first before resorting to 
violence. The good news is that the new generation of 
leaders has been in Bosnia and learned howtodeal with the 
locals and the media. They are learning from the school of 
hard knocks rather than formal training. The learning 
curve was steep in Bosnia, and the learning was not 
i nstituti onal ized, but for better or worse we are I earni ng the 
hard way. This may not be happening doctrinally at the 
J oint Readiness Training Center, and the schools are still 
not ready to teach it, but everyone is learning it. 

Colonel Ayala: In the Air Force we are training for the 
future, but not enough. At the Air Command and Staff 
College and the Air War College, information has been 
taught as an instrument of power at least si nee the time of 
the Gulf War. So many officers are learning about it, 
although a lot of officers do not have the opportunity to go 
through these schools. Many on theenlisted side are getting 
it in their leadership schools. However, it is still not far 
enough. I woul d add that as the Air Force is standing up the 
Expeditionary Air Force with all its new packages and 
coordination issues, the process has caused a good bit of 
confusion, but I think weare moving in theright direction. 

Civilian Control of the Military. 

Colonel Ayala: I think the civilian population may be 
getting out of touch, perhaps because people do not serve 
any more and we no longer have a draft. At the same ti me, 
we are an all-volunteer force, and what we do is 
instantaneously on TV. It is one thing to see it on TV and 
another to serve. What could be done? We need to bridge 
that gap somehow, maybe through the reinstitution of the 
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draft or some kind of national service. What is important is 
that citizens be familiar with theforcesthat guard our way 
of life. Second, politicians do have to point us in the right 
direction, but the situation now is such that even the 
regular airman or soldier is the contact point where the 
military interacts with the media and the public. Cockpit 
voice recordings are used to get a message across about our 
honesty and truthful ness i n admitti ng mi stakes, and others 
are sharing in that pilot's hectic experience but judging it 
publicly after the fact. You cannot time it or manage it; it is 
not goi ng to be as orchestrated as a press conference by the 
commander. 

Colonel Warsocki:Thefight is on today, and the military 
has to get engaged early. There are questions about 
over reachi ng the bounds of mi I itary structure, but we are i n 
whether we like it or not. Now how do we fix this? One, 
policy-makers need to be intellectually honest. Take the 
example of the Kosovo Liberation Army and how policy- 
makers like Secretary of State Madeleine Albright and 
then-Assistant Secretary of State Richard Holbrooke 
became emotionally involved with the Kosovar Albanians. 
There was a degree of disingenuousness about the 
Albanians being our "friends." The Albanians wanted the 
world's best air force to support them, so they engaged in a 
campai gn that was orchestrated to bri ng the U nited States 
into the fight. Factual intelligence on the ground made no 
difference to the policy-makers. Intellectual honesty has to 
takeover from emotional language. 

Dr. Metz: The mi I itary realizes it needs speed, notjust in 
mobility but in operations, beforethe enemy gets there. The 
probl em i s that we are movi ng toward a fast mi I itary but we 
still have a slow-moving political system. It is a good thing 
that pol itics takes a long ti me, because we need consensus i n 
a democracy. However, wargames we have conducted at 
Carlisle (at the Army War College) reveal the real tension 
between a quick military and the slower executive branch 
decisionmaking process. We are going to continue to see a 
tension between these speeds. 
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Colonel Warsocki : An example of that tension occurred 
when the Army crossed the Sava River into Bosnia. The 
Army got cal Is from the National Security Council on down 
asking what we could do about the situation in Sarajevo. 
The answers went up and down the chain, but it ultimately 
came down to what was politically acceptable and 
physically doable. We settled for taking the airfield. The 
determining factor was what politics would accept, rather 
than what was needed, and this put soldiers' lives at risk. 



141 




U.S. ARMY WAR COLLEGE 



Major General Robert R. Ivany 
Commandant 



STRATEGIC STUDIES INSTITUTE 
Director 

Professor Douglas C. Lovelace, J r. 

Director of Research 
Dr. Earl H.Tilford,J r. 

Editor 

Mr. Thomas E . Copeland 

Director of Publications and Production 
Ms. Marianne P. Cowling 

Publications Assistant 
Ms. Rita A. Rummel 



Composition 

Mrs. Christine A. Williams 

Cover Artist 
Mr.J ames E. Kistler 




